Register Login

sloganpng

top title background image

pandabanker_2.2.2.exe

Status: finished

Submission Time: 2020-07-19 21:52:06 +02:00

Malicious

Comments

Tags

Details

Analysis ID:
247684
API (Web) ID:
390691
Analysis Started:

2020-07-20 12:52:35 +02:00
Analysis Finished:

2020-07-20 13:05:23 +02:00
MD5:
89a27b8f3355933e99bb47083aba9744
SHA1:
44be1e76b73faa435d43f387940f15c63cc636a1
SHA256:
a6214596a7509e1456c46502e83032adf2ca9480a0fe29403dee24094e04df67
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 56	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
	Full Report Management Report IOC Report	malicious Score: 56	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 Run Condition: Run with higher sleep bypass

Third Party Analysis Engines

Open Full Report

malicious

Score: 57/72

Open Full Report

malicious

Score: 16/42

malicious

Score: 25/31

malicious

Dropped files

Name	File Type	Hashes	Detection
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_pandabanker_2.2._a2e39ec1f563e1bd623183ab5df4f657a0fe256_caddc919_107bb393\Report.wer	Little-endian UTF-16 Unicode text, with CRLF line terminators	#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERA701.tmp.dmp	Mini DuMP crash report, 14 streams, Mon Jul 20 19:54:02 2020, 0x1205a4 type	#
C:\ProgramData\Microsoft\Windows\WER\Temp\WERAA1F.tmp.WERInternalMetadata.xml	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators	#
Click to see the 1 hidden entries
C:\ProgramData\Microsoft\Windows\WER\Temp\WERAAEB.tmp.xml	XML 1.0 document, ASCII text, with CRLF line terminators	#