Overview

overview

10

Static

static

7

68cc5c2ca0...cd.exe

windows7-x64

10

68cc5c2ca0...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68cc5c2ca0c78317a2dabe528e1d89705e03cd534e2f1387c854f1457c109fcd.exe

  • Size

    5.6MB

  • Sample

    241123-wxxvrawlfn

  • MD5

    dabb7b6d295651ab4d281e3d01a4816b

  • SHA1

    2b4cacf1e297604edcbc2149182abe413eab0f6f

  • SHA256

    68cc5c2ca0c78317a2dabe528e1d89705e03cd534e2f1387c854f1457c109fcd

  • SHA512

    5fc742102f8d9a9ae527d5f7cec4fdeeaa3246e2e237b3fac8c187e7c130d428f449479603e30713310e801a8d98172d5f6b12aadf6ae0f05353c4cc984dc4a0

  • SSDEEP

    98304:Qr1eZRfOlXDCcQrgVV6EU4YKV6f+LNCFUdjhCgoJIB0BaOXWgMkCCAMOMvuaXwLQ:QafONCZgVY46f+6UNPNuXdAMOIULyt8Y

Score
10/10
pandastealershurkdiscoveryinfostealerspywarestealervmprotect

Malware Config

Targets

    • Target

      68cc5c2ca0c78317a2dabe528e1d89705e03cd534e2f1387c854f1457c109fcd.exe

    • Size

      5.6MB

    • MD5

      dabb7b6d295651ab4d281e3d01a4816b

    • SHA1

      2b4cacf1e297604edcbc2149182abe413eab0f6f

    • SHA256

      68cc5c2ca0c78317a2dabe528e1d89705e03cd534e2f1387c854f1457c109fcd

    • SHA512

      5fc742102f8d9a9ae527d5f7cec4fdeeaa3246e2e237b3fac8c187e7c130d428f449479603e30713310e801a8d98172d5f6b12aadf6ae0f05353c4cc984dc4a0

    • SSDEEP

      98304:Qr1eZRfOlXDCcQrgVV6EU4YKV6f+LNCFUdjhCgoJIB0BaOXWgMkCCAMOMvuaXwLQ:QafONCZgVY46f+6UNPNuXdAMOIULyt8Y

    Score
    10/10
    pandastealershurkdiscoveryinfostealerspywarestealervmprotect

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

      stealerpandastealer

    • Pandastealer family

      pandastealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer payload

    • Shurk family

      shurk

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks