Overview

overview

10

Static

static

3

37514775ce...18.exe

windows7-x64

10

37514775ce...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37514775ce8c353351766d3c63bbe20a_JaffaCakes118

  • Size

    4.1MB

  • Sample

    240711-cm348stblj

  • MD5

    37514775ce8c353351766d3c63bbe20a

  • SHA1

    0c24e04e08453e5ebb51eda74fe703bdd010801a

  • SHA256

    8682b402998f5069e2922a8cec15c4ab875a104c364366e02efed84cecb49355

  • SHA512

    60e746fe63898d3640f9dba29bb49966c97060b4182b38715c3dbb9e556f5828d236248d467143764a4fd47ad2c195af6f801b315b20d0c6185f20aab784873f

  • SSDEEP

    98304:uCoUst7FS9W07TERUZ7imTFMSfLjb4rsLwAYtEShShLHF/w:32t7w9vYKZ7ZHfbRL1yWl4

Score
10/10
pandastealershurkinfostealerspywarestealer

Malware Config

Targets

    • Target

      37514775ce8c353351766d3c63bbe20a_JaffaCakes118

    • Size

      4.1MB

    • MD5

      37514775ce8c353351766d3c63bbe20a

    • SHA1

      0c24e04e08453e5ebb51eda74fe703bdd010801a

    • SHA256

      8682b402998f5069e2922a8cec15c4ab875a104c364366e02efed84cecb49355

    • SHA512

      60e746fe63898d3640f9dba29bb49966c97060b4182b38715c3dbb9e556f5828d236248d467143764a4fd47ad2c195af6f801b315b20d0c6185f20aab784873f

    • SSDEEP

      98304:uCoUst7FS9W07TERUZ7imTFMSfLjb4rsLwAYtEShShLHF/w:32t7w9vYKZ7ZHfbRL1yWl4

    Score
    10/10
    pandastealershurkinfostealerspywarestealer

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks