General

  • Target

    a035d233500d7f10cc87139f43f51cf3

  • Size

    681KB

  • Sample

    240216-m4vjjahg78

  • MD5

    a035d233500d7f10cc87139f43f51cf3

  • SHA1

    46fd3dfd39f98b6f3a201b35eff3e93b8e6ffd4a

  • SHA256

    b2feb2b35a2c7173caaf9f2c64004c768cf8f1ab955aa3323fffe084659ec380

  • SHA512

    5c419c91ee97e3b2bdfb4cfcb9374cb0f7e062e7911f507869bc48cffc5afc2bdf6e888f6f4d9e11cdd423a306f243f89f43f90fd59f93ca7f3442a50dd6d4bb

  • SSDEEP

    12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlXjOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6Bs+p4

Malware Config

Extracted

Family

pandastealer

Version

1.11

C2

http://f0567127.xsph.ru

Targets

    • Target

      a035d233500d7f10cc87139f43f51cf3

    • Size

      681KB

    • MD5

      a035d233500d7f10cc87139f43f51cf3

    • SHA1

      46fd3dfd39f98b6f3a201b35eff3e93b8e6ffd4a

    • SHA256

      b2feb2b35a2c7173caaf9f2c64004c768cf8f1ab955aa3323fffe084659ec380

    • SHA512

      5c419c91ee97e3b2bdfb4cfcb9374cb0f7e062e7911f507869bc48cffc5afc2bdf6e888f6f4d9e11cdd423a306f243f89f43f90fd59f93ca7f3442a50dd6d4bb

    • SSDEEP

      12288:VoJqNIPtNmO6IOOEp0TMlja7NRl2PSVikIyoyueh+AkHcnLwuukoCOD6zlXjOz+2:VoJEKZ6IEGTMxapRl2PSwHTehy6Bs+p4

    • PandaStealer

      Panda Stealer is a fork of CollectorProject Stealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Collection

Data from Local System

1
T1005

Tasks