Overview

overview

3

Static

static

3

GorillaDow...T).exe

windows7-x64

1

GorillaDow...T).exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    GorillaDowngrader (QUEST).exe

  • Size

    2.2MB

  • MD5

    1b42eac017f00603ef2782817a3a0045

  • SHA1

    5d3f5103840fabf001dc61f98d36f85f6b4df145

  • SHA256

    83e4b0d8b2bb30b57f0791c0e1b45d26b923d200c984350c7e802ab312586088

  • SHA512

    0fa72993541d6a9bd05eed128eeb9a20afe0ba457c672d9ea18847249a22fddd2d0c910e2c228b2aa94b199f7b44d3c05dc0202e9ca8fa0b5423e10b36b62067

  • SSDEEP

    49152:0gnqAU4gEGivw8JSOSUP0tIwH0XBHdyFMmDQo1rI0UHu:+AMio8UOtPrwHOBs+mDQo1r8H

Score
3/10
pyinstaller

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GorillaDowngrader (QUEST).exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • stealer.pyc