General

  • Target

    a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.zip

  • Size

    1.4MB

  • Sample

    250211-qq99lstkgr

  • MD5

    32c7d8dc5f5d986dab756a5549028103

  • SHA1

    a6862c5f9698f920bd16f8b8c2ef8d6a36489ea6

  • SHA256

    a597407449e99e42471577da2506f2e9eae81d46aaf99070213373920ba6c215

  • SHA512

    2493d9cba02a17c94382a94d878ba7e1976f1b1bc49fe51a6cbdda2265f90b2f86c96ba7dd509483d42d8bbc91f748383ac9ecb57bde5360095007c890324736

  • SSDEEP

    24576:4HegEWYvfL2iVyxHB3hAGPOHG79A0GSznzzbcMhZJi1WrAQxx7e/EPJgj8DD/31u:N53oxHB3hAA9NG+fbca6WrAQx4/iGj6U

Malware Config

Targets

    • Target

      a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336.exe

    • Size

      1.4MB

    • MD5

      5b17a03a0b5c94c375c32700f075bb02

    • SHA1

      64aa47ddef5c2cd0969010ce4a5f01316f28a13b

    • SHA256

      a3dd5e28b1b551cbb99219d143efe1e888180cb6d7e20e22b78172e17e046336

    • SHA512

      0ba5e0bc997d0f44fab6bf9c8ba46e56992c56aa4e5fe1f4aed4420f958f26c684341d46ca0000bab3cc7141b232a163e6a309268945149a3d9f7417d50cf96c

    • SSDEEP

      24576:r6ys9o58JgbCBySG0qJb/E3x+1+QbataqDJmxFDSkAjZoxCSIKRQ+H5ADZUznX81:u996bRSgJgEbxq9mxxFuBeRJZADZUzs3

    • Panda Stealer payload

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Pandastealer family

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks