Overview

overview

10

Static

static

3

5c505d4d69...18.exe

windows7-x64

10

5c505d4d69...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c505d4d695201614785e00fe4804d30_JaffaCakes118

  • Size

    7.3MB

  • Sample

    241019-m5y84svcjm

  • MD5

    5c505d4d695201614785e00fe4804d30

  • SHA1

    53ce56472cc1a7e4d25b717913711356509673dc

  • SHA256

    72becc466ce524ed0b3d5198171e579efe0bcabb1cbc68ab6d16fd6cef597ae2

  • SHA512

    3b1547e92e5d5eff461db89234d338cca0d367078eeb61b39ecef9af29a57020850f79edb08a708d4334b4b91d0c6e5faec461fd9791dd912abec7a66a9aa718

  • SSDEEP

    196608:nHqfPCcdh1noY7LGh3SxaN0JDbnPnj62oiba:nHq3CmjPnGBSsN0JD7G2u

Score
10/10
pandastealerdiscoveryspywarestealer

Malware Config

Targets

    • Target

      5c505d4d695201614785e00fe4804d30_JaffaCakes118

    • Size

      7.3MB

    • MD5

      5c505d4d695201614785e00fe4804d30

    • SHA1

      53ce56472cc1a7e4d25b717913711356509673dc

    • SHA256

      72becc466ce524ed0b3d5198171e579efe0bcabb1cbc68ab6d16fd6cef597ae2

    • SHA512

      3b1547e92e5d5eff461db89234d338cca0d367078eeb61b39ecef9af29a57020850f79edb08a708d4334b4b91d0c6e5faec461fd9791dd912abec7a66a9aa718

    • SSDEEP

      196608:nHqfPCcdh1noY7LGh3SxaN0JDbnPnj62oiba:nHq3CmjPnGBSsN0JD7G2u

    Score
    10/10
    pandastealerdiscoveryspywarestealer

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks