General

  • Target

    fb8392745c0c4ab37052b0ebb9d306db5d0ce45ae028d35a61b23e9849eaf271N.exe

  • Size

    2.7MB

  • Sample

    241201-dz674avrcs

  • MD5

    49fff7730978744c7a832440f8afe560

  • SHA1

    a960cec5c814af717348bb33f50a3edc847b2551

  • SHA256

    fb8392745c0c4ab37052b0ebb9d306db5d0ce45ae028d35a61b23e9849eaf271

  • SHA512

    1f465b3e4bd6fa43d1d48aa16a99700d05ed7f2b2e2a9fd49fe6d3e298f5c004175c75153789b74d27821e76800c6b3a5d05e9e05be33d3a7f8f8a3139a89dab

  • SSDEEP

    49152:m3AQbdYAm4zEbdYAm4zWbdYAm4z23Aw3AWbdYAm4zSbdYAm4zO3AxHuEJ1Zg9zPd:UAadrWdr0drkAiA0dr4dr8A4eA5TuC

Malware Config

Targets

    • Target

      fb8392745c0c4ab37052b0ebb9d306db5d0ce45ae028d35a61b23e9849eaf271N.exe

    • Size

      2.7MB

    • MD5

      49fff7730978744c7a832440f8afe560

    • SHA1

      a960cec5c814af717348bb33f50a3edc847b2551

    • SHA256

      fb8392745c0c4ab37052b0ebb9d306db5d0ce45ae028d35a61b23e9849eaf271

    • SHA512

      1f465b3e4bd6fa43d1d48aa16a99700d05ed7f2b2e2a9fd49fe6d3e298f5c004175c75153789b74d27821e76800c6b3a5d05e9e05be33d3a7f8f8a3139a89dab

    • SSDEEP

      49152:m3AQbdYAm4zEbdYAm4zWbdYAm4z23Aw3AWbdYAm4zSbdYAm4zO3AxHuEJ1Zg9zPd:UAadrWdr0drkAiA0dr4dr8A4eA5TuC

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Pandastealer family

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks