Overview

overview

10

Static

static

3

4943c7226b...4f.exe

windows7-x64

10

4943c7226b...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4943c7226b2d5a66f0bbd0f701767cf35603a7e212bab0eaa43a665740866a4f.exe

  • Size

    3.1MB

  • Sample

    241119-e1lhfsznfv

  • MD5

    da60d7cd51eb03829b3d7240f8e08b18

  • SHA1

    982954752094f3a007c11cc1140589a84266f883

  • SHA256

    4943c7226b2d5a66f0bbd0f701767cf35603a7e212bab0eaa43a665740866a4f

  • SHA512

    30d1d97b908f3ecff825dc8e7614b0dff02610246e7df24250fd6fa4fc51e94c802ae07259e7105ca39368ce2a15df7845f6504647dc7a481eefee62462c43db

  • SSDEEP

    49152:CHEewueEMkwkN4AxZOGY/g0yiluZdGwEbe7dD:a

Score
10/10
pandastealerdiscoverystealer

Malware Config

Targets

    • Target

      4943c7226b2d5a66f0bbd0f701767cf35603a7e212bab0eaa43a665740866a4f.exe

    • Size

      3.1MB

    • MD5

      da60d7cd51eb03829b3d7240f8e08b18

    • SHA1

      982954752094f3a007c11cc1140589a84266f883

    • SHA256

      4943c7226b2d5a66f0bbd0f701767cf35603a7e212bab0eaa43a665740866a4f

    • SHA512

      30d1d97b908f3ecff825dc8e7614b0dff02610246e7df24250fd6fa4fc51e94c802ae07259e7105ca39368ce2a15df7845f6504647dc7a481eefee62462c43db

    • SSDEEP

      49152:CHEewueEMkwkN4AxZOGY/g0yiluZdGwEbe7dD:a

    Score
    10/10
    pandastealerdiscoverystealer

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Pandastealer family

      pandastealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks