Overview

overview

10

Static

static

10

werner.exe

windows10-2004-x64

7

2����.pyc

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    werner.exe

  • Size

    8.7MB

  • MD5

    a0be86eccedca95480b2cd70dc265e5c

  • SHA1

    f757d237b18326813495716637fc4ecd8ce403a6

  • SHA256

    8f3f2600320c0a7e5e44b350bfff7b07f2ba5b28fc4cb56e64555e253e6e44dd

  • SHA512

    8cfd4cc79a802e204f647d60ae8d63b0d0d4bbb2ee234f0411b78960c32d26a2d92c7268dfc76590cf75ffe0f858e6842466f5dfb5f13847ff843b2f16828ec3

  • SSDEEP

    196608:A5Y2OshoKMuIkhVastRL5Di3tnSEMdHYT1xSPJX:kY2OshouIkPftRL540ZU/oX

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • werner.exe
    .exe windows x64

    Password: infected

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • 2����.pyc