General

  • Target

    SecuriteInfo.com.Win32.Evo-gen.25074.5718.exe

  • Size

    1.4MB

  • Sample

    250211-lxa1wasphp

  • MD5

    5b17a03a0b5c94c375c32700f075bb02

  • SHA1

    64aa47ddef5c2cd0969010ce4a5f01316f28a13b

  • SHA256

    a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336

  • SHA512

    0ba5e0bc997d0f44fab6bf9c8ba46e56992c56aa4e5fe1f4aed4420f958f26c684341d46ca0000bab3cc7141b232a163e6a309268945149a3d9f7417d50cf96c

  • SSDEEP

    24576:r6ys9o58JgbCBySG0qJb/E3x+1+QbataqDJmxFDSkAjZoxCSIKRQ+H5ADZUznX81:u996bRSgJgEbxq9mxxFuBeRJZADZUzs3

Malware Config

Targets

    • Target

      SecuriteInfo.com.Win32.Evo-gen.25074.5718.exe

    • Size

      1.4MB

    • MD5

      5b17a03a0b5c94c375c32700f075bb02

    • SHA1

      64aa47ddef5c2cd0969010ce4a5f01316f28a13b

    • SHA256

      a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336

    • SHA512

      0ba5e0bc997d0f44fab6bf9c8ba46e56992c56aa4e5fe1f4aed4420f958f26c684341d46ca0000bab3cc7141b232a163e6a309268945149a3d9f7417d50cf96c

    • SSDEEP

      24576:r6ys9o58JgbCBySG0qJb/E3x+1+QbataqDJmxFDSkAjZoxCSIKRQ+H5ADZUznX81:u996bRSgJgEbxq9mxxFuBeRJZADZUzs3

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Pandastealer family

    • Downloads MZ/PE file

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks