General

  • Target

    d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118

  • Size

    7.3MB

  • Sample

    241207-x3htfsyqgx

  • MD5

    d339beb623e2fc6bd8c6c6cd8f5f2c66

  • SHA1

    79c6ccac826ea5ea391229e26739b3d9d3824f53

  • SHA256

    b5383687485748d8a488322499fa215c6a9d838823df90274d272007680aca5e

  • SHA512

    a76504269345a9bbdb707114ac00c10a585f1cb4610b98f2cc640b23ab722b0c5c1d0fdfc3a58a4ce08454c3c4b8c7d1f687e9551dc570f08c22118ccbe0a950

  • SSDEEP

    196608:tHqfPCcdh1noY7LGh3SxaN0JDbnPnj62oiba:tHq3CmjPnGBSsN0JD7G2u

Malware Config

Targets

    • Target

      d339beb623e2fc6bd8c6c6cd8f5f2c66_JaffaCakes118

    • Size

      7.3MB

    • MD5

      d339beb623e2fc6bd8c6c6cd8f5f2c66

    • SHA1

      79c6ccac826ea5ea391229e26739b3d9d3824f53

    • SHA256

      b5383687485748d8a488322499fa215c6a9d838823df90274d272007680aca5e

    • SHA512

      a76504269345a9bbdb707114ac00c10a585f1cb4610b98f2cc640b23ab722b0c5c1d0fdfc3a58a4ce08454c3c4b8c7d1f687e9551dc570f08c22118ccbe0a950

    • SSDEEP

      196608:tHqfPCcdh1noY7LGh3SxaN0JDbnPnj62oiba:tHq3CmjPnGBSsN0JD7G2u

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Pandastealer family

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks