General

  • Target

    JaffaCakes118_7fca2723541f168277d86e4d4dbaca86

  • Size

    629KB

  • Sample

    250107-3w1nksvjc1

  • MD5

    7fca2723541f168277d86e4d4dbaca86

  • SHA1

    087f33bbc7a33a97c8042a625f80a9237fd50933

  • SHA256

    61e2c1dcd3566762891f7b6e950adf1fb35cc202803317569b3013d8b2462c3b

  • SHA512

    a44a4f1ac2c3961f62d79ea2d9ec452e390a272b65ee2689137c735f28f9765e0c7128d1fca8c4a6414aec405848831e5e72929624cfa42d4062df3b67c635d1

  • SSDEEP

    12288:aEkswmVz1UOr30CsPausH1zb4FQwWe3GbudJ:omVzSKsrsJb4Ww1

Malware Config

Targets

    • Target

      JaffaCakes118_7fca2723541f168277d86e4d4dbaca86

    • Size

      629KB

    • MD5

      7fca2723541f168277d86e4d4dbaca86

    • SHA1

      087f33bbc7a33a97c8042a625f80a9237fd50933

    • SHA256

      61e2c1dcd3566762891f7b6e950adf1fb35cc202803317569b3013d8b2462c3b

    • SHA512

      a44a4f1ac2c3961f62d79ea2d9ec452e390a272b65ee2689137c735f28f9765e0c7128d1fca8c4a6414aec405848831e5e72929624cfa42d4062df3b67c635d1

    • SSDEEP

      12288:aEkswmVz1UOr30CsPausH1zb4FQwWe3GbudJ:omVzSKsrsJb4Ww1

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Pandastealer family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks