Overview
overview
9Static
static
9Pandora RA...n].exe
windows10-2004-x64
3Pandora RA...n].exe
windows11-21h2-x64
3Pandora RA...ub.exe
windows10-2004-x64
3Pandora RA...ub.exe
windows11-21h2-x64
3Pandora RA...px.exe
windows10-2004-x64
5Pandora RA...px.exe
windows11-21h2-x64
5Pandora RA...le.exe
windows10-2004-x64
7Pandora RA...le.exe
windows11-21h2-x64
7Pandora RA...wb.exe
windows10-2004-x64
7Pandora RA...wb.exe
windows11-21h2-x64
7Pandora RA...er.exe
windows10-2004-x64
3Pandora RA...er.exe
windows11-21h2-x64
3Analysis
- user interaction
yes - max time kernel
298s - max time network
273s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
29/05/2026, 15:59
Behavioral task
behavioral1
Sample
Pandora RAT V1.1/Pandora RAT V1.1 [Public Silent Edition].exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Pandora RAT V1.1/Pandora RAT V1.1 [Public Silent Edition].exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
Pandora RAT V1.1/Stub/stub.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Pandora RAT V1.1/Stub/stub.exe
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Pandora RAT V1.1/Stub/upx.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Pandora RAT V1.1/Stub/upx.exe
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Pandora RAT V1.1/file.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Pandora RAT V1.1/file.exe
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Pandora RAT V1.1/plugin/wb.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Pandora RAT V1.1/plugin/wb.exe
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Pandora RAT V1.1/server.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Pandora RAT V1.1/server.exe
Resource
win11-20260513-en
General
- Target Pandora RAT V1.1/Stub/stub.exe
- Size 572KB
- Sample260529-te84ysf131
- SHA256 3a368e8aad03b489b71857d21767b040a9cf0b433d1749013a9e07b133e8d136
- MD5 52214a8bb04d199db31cac50b041695b
- SHA1 e60586df3e75b12d01d798415d0fa55b0ef04770
- SHA512 572407afff291e6b7db978958b97316891160a405567d43f4f29e192a21f04da7c3eb1ab77ae70290435b230fd841f23fac929a073edacbfeccac0b5b56cfc4a
- SSDEEP 12288:6xBbOHsxOnvX5/qnGaNp1sx1lD9bQtEL7g3w0XkeB:eSjnvJERBs9DBQIUv0e
- TLSH T19BC4AF21F2C1443BD5736A789C2F929D982ABF103E28E84A67F41D4C9F393517E2A1D7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language stub.exe