263426dccd530fa0d2f6c89dca585e6b0a5304d212f602caa9cae4680d480bbb

Sharing

Copy URL Twitter E-mail

General

Target
Pandora RAT V1.1.zip
Size 3.2MB
Sample260529-te84ysf131
SHA256 263426dccd530fa0d2f6c89dca585e6b0a5304d212f602caa9cae4680d480bbb
MD5 dfad9320f884231e06ab6932974a36d9
SHA1 d52d570603008afdce85ac08e1cb80eb714daeb1
SHA512 4e7961f0982e958e300346edd3c898bcc1b75fe25a81e1421d542a44ca19fbdd318aae51c23a8aab99957acc3178b105c3656e72a49f8121775e8982212ad8b0
SSDEEP 49152:H8+dgKwaoh5V4wHDqVPlcwNPCspwgBY4B48Ci+y+3x9I9pCWguX2Ygyv:cqgKxohv4wjDwPvWjdxXI9pXfgyv
TLSH
T180F5335692D72F65E6A8FD27F9ACF773E837B8C7182C6052B22F5EB0814B1C8251D019
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

Malware Config

Targets

- Target
  Pandora RAT V1.1/Pandora RAT V1.1 [Public Silent Edition].exe
- Size 927KB
- SHA256 553447c0b7f3f66e4056047c98783665a17097b0a2aca74a507e56a6d7c1e889
- MD5 914635beb5ff17a1387676c921c01409
- SHA1 4554ade876648a34ff4dba6fc0e16d6914f4c91d
- SHA512 e4993e96ab540faa2e6798b762e0dbe1ee3d2a63dca1e3a28ab2e0fae9646e1cb80801f40e0865cb560b7842546d8cb1764c47038e3ac6bbd1282788944a891d
- SSDEEP 12288:HhtuTOdctrklbYWH9xvVxKby7nGpn7XF2F7mbxcpaV7kddZh6uCLMZ:+GctrtWjvVxEyjGbpUaV7kddr64
- TLSH
  T18D1512092B844E57D4A5BDF60562ED95FAE6AC5F807D0502A870BEADA7330C7CE6C04F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  Pandora RAT V1.1/Stub/stub.exe
- Size 572KB
- SHA256 3a368e8aad03b489b71857d21767b040a9cf0b433d1749013a9e07b133e8d136
- MD5 52214a8bb04d199db31cac50b041695b
- SHA1 e60586df3e75b12d01d798415d0fa55b0ef04770
- SHA512 572407afff291e6b7db978958b97316891160a405567d43f4f29e192a21f04da7c3eb1ab77ae70290435b230fd841f23fac929a073edacbfeccac0b5b56cfc4a
- SSDEEP 12288:6xBbOHsxOnvX5/qnGaNp1sx1lD9bQtEL7g3w0XkeB:eSjnvJERBs9DBQIUv0e
- TLSH
  T19BC4AF21F2C1443BD5736A789C2F929D982ABF103E28E84A67F41D4C9F393517E2A1D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  Pandora RAT V1.1/Stub/upx.exe
- Size 287KB
- SHA256 4d3d363b5b3dcd9fa516b481c92d62c02aed804318bdc4d5e97a68bb6e6d62db
- MD5 ffa637abd482b5e7d3fb75182f43f080
- SHA1 d5589ff9d01d8d64669e41161f71e9969ee4204f
- SHA512 515ed43190b9b73feb389efd125cbd4cd435b90189adf51a215cb28d70c564c936cfa6f7ec46b606212979947f341e2b854d33fdeefe190163e508dcfdd3375b
- SSDEEP 6144:LzqksXN31+Sr5iwK/TX2PutO+8ttyayDQ/jxV1wAWhClA/vDfNI8eoS:v21r6X2GtOjzyzQ/D1wAWjnDFpeoS
- TLSH
  T1C554231B9CF342CBC16CE07D0BB1A66393196741994AA3B0143D34B7618BFA6BD5CE4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6
- Target
  Pandora RAT V1.1/file.exe
- Size 1.3MB
- SHA256 86670d63429281a4a65c36919ca0f3099e3f803e3096c3a9722d61b3d31e4a9f
- MD5 0710d1880c199cecd794762e9b7b2ac3
- SHA1 0a5059aaf7f0006c09632ebe39abae37cd739011
- SHA512 0a1e8b876ecf4c58801743f6144e47951a60ade274a8bb7c3476ea70874e023b8c4e5e71e5fa25064dc7ec9208d8ea7a5e520107788fe06955fca0f71aa91b63
- SSDEEP 24576:FzQBCmKLqJxwbY0rtTdVzqKVlbqpBTO0fb2IxhJmVVZB74lb:FzQdKLq8EGep5TqIxfmVPhMb
- TLSH
  T11765335BE2CADA73D6A11F30B4D8F636A83B7CA06C3C8542AB4E1E5C3055578D12663F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral7 behavioral8
- Target
  Pandora RAT V1.1/plugin/wb.exe
- Size 332KB
- SHA256 a33b3ce0aea96a0cd84e504637a7814b713bddbc0dba96765e6a1a0f6c1375db
- MD5 0c72a8adb7b63b348f9f26675766c461
- SHA1 582de9f8d3afa758637bcda6c8da1b0c31379da0
- SHA512 993867db2e3b19183b89a89841a2989b1b5895b495859714c38a1116ade518e6ef03a77fcff445f432d9b163ad91a2a47622729b12785f25ec84eb4ac6e2715e
- SSDEEP 6144:uReb+uh64DUVRE5bXCBo2soN3alUNYMe0qOAttkihz:uR/uw4DV4woN3OsGTkU
- TLSH
  T14074BF13B3E28037E8BB0170066B5B33EEFD7A202675895757D41C49AE70691BA3E74B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral10 behavioral9
- Target
  Pandora RAT V1.1/server.exe
- Size 572KB
- SHA256 b94ad2d15b45c6a236d1414f787f59fe0a9d3538c0591c6764e67a77b4869948
- MD5 0189621bf4ad945bbc357745c8f6ca83
- SHA1 112b026a80dcf499f6770446f359bf56f0c2163f
- SHA512 41e7351a677c67b9f75cda8b5c7ab7d462f62a1e4e1f77ea3c513baa066bf6663b5e4f0ccb67d168457340d66954d3297e689ade9215c8ad48341f7283356beb
- SSDEEP 12288:KxBbOHsxOnvX5/qnGaNp1sx1lD9bQtEL7g3w0Xketp:uSjnvJERBs9DBQIUv0er
- TLSH
  T1C6C4AF21F2C1443BD5736E789C1F929D982ABF103E28A84A67F51D4C9F393613E2A1D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12