pandastealer | 1f7f2749b7b5c96734f5d6186c9be94a3a3cbc4472eaa1630e4e26932d0c0ba0 | Triage

Sharing

General

Target

2024-10-20_93809be4e500789f082a2ecd330bde8b_mafia
Size

672KB
Sample

241020-zgqchs1cjj
MD5

93809be4e500789f082a2ecd330bde8b
SHA1

75e0aae3a939f29e862220b088646d10414d7e12
SHA256

1f7f2749b7b5c96734f5d6186c9be94a3a3cbc4472eaa1630e4e26932d0c0ba0
SHA512

d05dd4090b2a10e77ba3a1cf1c41754d10e297764c4289f8e4e89fccbe1b1e1f2215aacef861a1b632a2fb25e915984f5f96714a0e80ee2f35ff9cdd6c5dff42
SSDEEP

12288:FTNjEc3PR8R0ZdAscJ9AMUxGi3oUw/cnuXMx2JOVawyu6GPr96/zSb9R3/R9maTg:hNjE2PRhgx3AHf3odEuXMx2JOVKuJPrs

Score

10^/10

pandastealer discovery evasion

Malware Config

Targets

- Target
  
  2024-10-20_93809be4e500789f082a2ecd330bde8b_mafia
- Size
  
  672KB
- MD5
  
  93809be4e500789f082a2ecd330bde8b
- SHA1
  
  75e0aae3a939f29e862220b088646d10414d7e12
- SHA256
  
  1f7f2749b7b5c96734f5d6186c9be94a3a3cbc4472eaa1630e4e26932d0c0ba0
- SHA512
  
  d05dd4090b2a10e77ba3a1cf1c41754d10e297764c4289f8e4e89fccbe1b1e1f2215aacef861a1b632a2fb25e915984f5f96714a0e80ee2f35ff9cdd6c5dff42
- SSDEEP
  
  12288:FTNjEc3PR8R0ZdAscJ9AMUxGi3oUw/cnuXMx2JOVawyu6GPr96/zSb9R3/R9maTg:hNjE2PRhgx3AHf3odEuXMx2JOVKuJPrs
Score

10^/10

discovery evasion
- Modifies firewall policy service
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion