zeusmuseum. - Pandabanker

Pandabanker (Zeus Panda)

5459 samples

References (23)

2016-04-20: Panda Banker: New Banking Trojan Hits the Market [124]
2016-06-07: LinkedIn information used to spread banking malware in the Netherlands [139]
2016-07-13: Zeus Panda Begins Targeting EU, NA Banks, Uses Web-Injections and ATS [123]
2016-07-26: Zeus Panda Delivered By Sundown - Targets UK Banks [184]
2016-07-27: Who Let the Pandas Out? Zeus, Zeus, Zeus, Zeus [183]
2016-08-04: Panda Is One Hungry Bear! A Heavyweight Banking Trojan Rolls Into Brazil [128]
2016-08-12: Bad News Bears - Panda Banker Starts Looking More Like a Grizzly [129]
2017-06-22: Analysis Results of Zeus.Variant.Panda [131]
2017-11-02: Poisoning the Well: Banking Trojan Targets Google Search Results [132]
2017-12-14: Zeus Panda Banking Trojan Targets Online Holiday Shoppers [134]
2017-12-28: Panda Banker hits Italy – Analysis Part 1 [136]
2017-12-28: PandaZeuS’s Christmas Gift: Change in the Encryption scheme [133]
2018-01-04: Panda Banker hits Italy – Analysis Part 2 [135]
2018-03-27: Panda Banker Zeros in on Japanese Targets [130]
2018-05-09: Panda Malware Broadens Targets to Cryptocurrency Exchanges and Social Media [138]
2018-06-02: 3.0 Panel [114]
2018-07-24: Recent Emotet activity [141]
2018-08-19: Let's Learn: Dissecting Panda Banker & Modules: Webinject, Grabber & Keylogger DLL Modules [144]
2018-10-09: Threat Spotlight: Panda Banker Trojan Targets the US, Canada and Japan [140]
2018-12-29: Panda Banker hits Italy – Analysis Part 3 [137]
2019-12-18: Panda Banker (Zeus clone) [32]
2019-12-18: win.pandabanker [25]
2022-12-11: The non-mythological story of Zeus #botnet [450]

Version	Count	ITW	IOCs	Reference Sample
2.1.0	3	2016-01-27	Samples	db790cbe0beb2a9c2749cb914fbdec8bdc7aa2ef3c9ca6c721e0c0fede715fb2 (VT MB)
2.1.1	9	2016-02-09	Samples	62989ab56f11701b109cddf0eb20e995c833078bb40942a8c931589497c25948 (VT MB)
2.1.2	33	2016-03-03	Samples	e4e8aac2107834b2d895fc35d71bb396075d971c650ff173714c3d17956c7da6 (VT MB)
2.1.3	21	2016-03-10	Samples	be4a4c076d2644bb29e90d6dc42ce9f400a940a9d684fd9073abdca0b65c9bca (VT MB)
2.2.1	1	2016-04-21	Samples	31f8346b01d9e3c307280bf900de4e91a57d579d5327f75fd697431bcdd20dd4 (VT MB)
2.2.2	33	2016-05-05	Samples	a6214596a7509e1456c46502e83032adf2ca9480a0fe29403dee24094e04df67 (VT MB)
2.2.3	17	2016-06-12	Samples	70752b45ccb4a9f987d95097e810b9cbbbfb4141ac35a0b55e55b95c67b022b0 (VT MB)
2.2.4	5	2016-06-22	Samples	e4943560d76692bfd6d1e9982e717f8ae79b1577fff1d943c9aaa3d5e2f06fde (VT MB)
2.2.5	126	2016-07-01	Samples Webinjects	8b698af43c10c0509d15d39d688674f9885295a4679a4f6afffcf1714322c7a7 (VT MB)
2.2.6	41	2016-09-03	Samples Webinjects	1e1684d4513c0c3ad9d15fb28b65edbb505977729bc60c61dd7f69c484bc08a2 (VT MB)
2.2.7	651	2016-09-12	Samples Webinjects	f21872a03fcb62dbac5cd7ea2c92db4595f4a55906d7a91ffa6ce5cae2b84e91 (VT MB)
2.2.8	1108	2016-09-30	Samples Webinjects	4352a4309cb454aa6ba59932456f32dbfee4b0b5d998d954518dcff43ff8281b (VT MB)
2.2.9	150	2016-10-26	Samples Webinjects	7fed42ce016ec6ac5ea6ee1468b1f96afa55955f955471b89bb57c903f0e8fdb (VT MB)
2.2.10	224	2016-11-11	Samples Webinjects	0d61cc62923f2df6a74fd877cc41c5a4df61355a3ded608bab7b9dde0fb98f41 (VT MB)
2.2.11	22	2016-12-20	Samples	10b85536fedabb3c8ca3bed5822f368ed64a09bb06b4f595ac4dc18aeb565426 (VT MB)
2.2.12	39	2016-12-22	Samples Webinjects	2e6634f1f1abdd8cc2d651d060631598caf6374fee5bc3cd8b246e3090e4c4fa (VT MB)
2.2.13	85	2017-01-25	Samples Webinjects	bab0018688dca84b2f433575f005a9eb9ccf7f18c5c952889ed11d335e1675d3 (VT MB)
2.2.14	93	2017-02-19	Samples Webinjects	e8012d5c00deb0a3684d7767de19e4dea2ff536060fe5671393252152b0b1d8f (VT MB)
2.3.1	11	2017-03-12	Samples Webinjects	7eb56d98f341b98164b70f34d5f4008a07f3fe9d02943ddc7edeacb05f6dd5ef (VT MB)
2.3.2	181	2017-03-17	Samples Webinjects	59e2125782c015d9cad7ae6035eaed1cfab4889ee90ed74888582c784d08fb3b (VT MB)
2.3.3	44	2017-04-25	Samples Webinjects	3bbfbe3de9cb174f9d7c579f5e404482778924df85eb4b9daa03a274fc91eb91 (VT MB)
2.3.4	112	2017-05-04	Samples Webinjects	8337b387ec3cafdaa01347f123383682a8bb1e6965a922258fd656a36ebe919d (VT MB)
2.4.1	80	2017-06-10	Samples Webinjects	0d28bf33f99d286092870f3504f54bc0cb81a0f733275d0b689d6bdb9aeb758a (VT MB)
2.4.2	86	2017-06-21	Samples Webinjects	6278fbd54efddf8382ab45329e58e655cb7f82dc86f60028935b96eba9ce16bc (VT MB)
2.4.3	68	2017-07-20	Samples Webinjects	634aea27e31c58f7e07510965e6d7350a8cf7e18c5cd5099edcf0586f1990ab9 (VT MB)
2.4.4	1	2017-08-18	Samples	dc2d2f5e3a65bf4799b13a7e8e1f7729056af113e2d8932995dcde0e9c16e13f (VT MB)
2.5.0	25	2017-08-31	Samples Webinjects	335c0e4430a08956f796611b3ebf273117e784ee1d728d7b8fcb9997c98735cc (VT MB)
2.5.1	11	2017-08-31	Samples Webinjects	31ed064712da1c70c11c2e157e8469812befb3f051dcd7ffa4de44be49860381 (VT MB)
2.5.2	61	2017-09-07	Samples Webinjects	f7bcc93d67f3de8a08b9b263f62e5107baa6eb746cfbb41cff2b76646e186829 (VT MB)
2.5.3	21	2017-09-20	Samples Webinjects	89c7c8a795578ef239fef68fe949c29f50f7f40833f6eb87eabf66cae290eab6 (VT MB)
2.5.4	19	2017-09-26	Samples Webinjects	5090d89adf0523559aba758adb1bf3c1f1afe20e354242a96020c41816652cbf (VT MB)
2.5.5	64	2017-09-30	Samples Webinjects	c3be55a58b2afa08ba8520d981c50ab773113da36b139985ad16e5fab39ac145 (VT MB)
2.5.6	48	2017-10-17	Samples Webinjects	ae96dbb67a548c38a292255130c47b99ec028e6afa228d62980a03ba9d7f03b0 (VT MB)
2.5.7	778	2017-10-20	Samples Webinjects	db09e6f69ea651370d796ee2fd4a78d9a11cd82faea3f8d5ef007c04065b1e25 (VT MB)
2.6.0	14	2017-12-05	Samples Webinjects	3de467124b098019e59fbdbcd3815db8001f6479e17da506d0c10c0f83dcde7f (VT MB)
2.6.1	181	2017-12-09	Samples Webinjects	b66eace0a610e947b3aa9964f0ff8e94978c19f290ca377b1e5e558feca44879 (VT MB)
2.6.2	32	2018-01-23	Samples Webinjects	94c1b963cc2b06ec91490e557ded99ecfc04d336eea26fdb2f4253a0cfa3ed81 (VT MB)
2.6.3	4	2018-01-29	Samples Webinjects	26e84519f3875d3c579c95ec1694eff8224f75eaec63ae8970bc85ff1479f392 (VT MB)
2.6.4	55	2018-02-19	Samples Webinjects	68264c44774c650ce96e87807781ed0dcf25a1d50cc90e08731fde466b25c791 (VT MB)
2.6.5	34	2018-03-14	Samples Webinjects	5782c7ade207fd4415c35bd1e98bad7c3fcaef206fa60f142b8d1062e7103670 (VT MB)
2.6.6	61	2018-03-26	Samples Webinjects	8db8f6266f6ad9546b2b5386a835baa0cbf5ea5f699f2eb6285ddf401b76ccb7 (VT MB)
2.6.7	21	2018-04-20	Samples Webinjects	41ac9dd172ebc186c77cab9f12401ab18805e77c34eacdf9dfdbd570d8bd9c62 (VT MB)
2.6.8	58	2018-04-24	Samples Webinjects	5e5deea253834d0319b48c018714f779c499ed79df464e11d4f5ba63ac415f5f (VT MB)
2.6.9	119	2018-05-14	Samples Webinjects	3d95e6885d4a0a66dad5d37750fa84a4d4f1f9db2ccc741997d22d89af92cbfb (VT MB)
2.6.10	609	2018-06-02	Samples Webinjects	57ad651687d7bad1d5be010376dcd1c62a467ddfae3e96bc6429e7d53cb23e0d (VT MB)

curator@zeusmuseum.com / @tildedennis