General

  • Target

    ddos-reaper.exe

  • Size

    1.2MB

  • Sample

    240325-e9ljtagc29

  • MD5

    dd20876bf25544aa55e0c3725103c666

  • SHA1

    d00d689de9f35159188935d3bd93677c807ed655

  • SHA256

    33e5d605c1c13a995d4a2d7cb9dca9facda4c97c1c7b41dc349cc756bfc0bd67

  • SHA512

    8e88e8777717d203065144ce594e18f86048c83c83d06ef06f0255f42c0de1bfdb1da2faad2bb39da52a652eb4267af79a84d2822afb6e5e31e27899b70ab9fc

  • SSDEEP

    24576:D8Ic2Byst8cLgkzOqxJk9fsngYLkIZfYK/cRgOnmq9g6PzAew:D8Ic2ByG7LgNIhL9fzcOU7m6g

Malware Config

Targets

    • Target

      ddos-reaper.exe

    • Size

      1.2MB

    • MD5

      dd20876bf25544aa55e0c3725103c666

    • SHA1

      d00d689de9f35159188935d3bd93677c807ed655

    • SHA256

      33e5d605c1c13a995d4a2d7cb9dca9facda4c97c1c7b41dc349cc756bfc0bd67

    • SHA512

      8e88e8777717d203065144ce594e18f86048c83c83d06ef06f0255f42c0de1bfdb1da2faad2bb39da52a652eb4267af79a84d2822afb6e5e31e27899b70ab9fc

    • SSDEEP

      24576:D8Ic2Byst8cLgkzOqxJk9fsngYLkIZfYK/cRgOnmq9g6PzAew:D8Ic2ByG7LgNIhL9fzcOU7m6g

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • PhoenixStealer

      PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks