pandastealer | 8dde5af4425dfa284a1cd3fb6415fa419a428c647561757292fb1b1a988e7e9e | Triage

Submit
Reports

Overview

overview

Static

static

7

927b306074...18.exe

windows7-x64

927b306074...18.exe

windows10-2004-x64

Sharing

General

Target

927b306074fd7627714385e8dfea4a18_JaffaCakes118
Size

6.8MB
Sample

240813-lc9npszgrr
MD5

927b306074fd7627714385e8dfea4a18
SHA1

23af8c09422dbd19d3c4ee41dd9366803532da92
SHA256

8dde5af4425dfa284a1cd3fb6415fa419a428c647561757292fb1b1a988e7e9e
SHA512

80574d03838b7c8013a108138c165f81499ed1ca975f2bfcd37dc1ebac2953241cd40dd956cf99cb3d4a03c4d98d3385ff1ce62b4c2f6f3760213cd34aec614a
SSDEEP

196608:Eed2XeBBW84st5j9cWbq3I3o+xi9ICMR8d:E62OHW84+j9oQX4yCMSd

Score

10^/10

pandastealer discovery stealer vmprotect

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

927b306074fd7627714385e8dfea4a18_JaffaCakes118.exe

Resource

win7-20240729-en

pandastealer discovery stealer vmprotect

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

927b306074fd7627714385e8dfea4a18_JaffaCakes118.exe

Resource

win10v2004-20240802-en

pandastealer discovery stealer vmprotect

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  927b306074fd7627714385e8dfea4a18_JaffaCakes118
- Size
  
  6.8MB
- MD5
  
  927b306074fd7627714385e8dfea4a18
- SHA1
  
  23af8c09422dbd19d3c4ee41dd9366803532da92
- SHA256
  
  8dde5af4425dfa284a1cd3fb6415fa419a428c647561757292fb1b1a988e7e9e
- SHA512
  
  80574d03838b7c8013a108138c165f81499ed1ca975f2bfcd37dc1ebac2953241cd40dd956cf99cb3d4a03c4d98d3385ff1ce62b4c2f6f3760213cd34aec614a
- SSDEEP
  
  196608:Eed2XeBBW84st5j9cWbq3I3o+xi9ICMR8d:E62OHW84+j9oQX4yCMSd
Score

10^/10

pandastealer discovery stealer vmprotect
- Panda Stealer payload
- PandaStealer
  Panda Stealer is a fork of CollectorProject Stealer written in C++.
  stealer pandastealer
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

pandastealerdiscoverystealervmprotect

behavioral2

pandastealerdiscoverystealervmprotect

© 2018-2024

Terms | Privacy