General

  • Target

    Ivory tool.exe

  • Size

    15.0MB

  • MD5

    2d3179ffc5f58b331963bcf3f0b1da1d

  • SHA1

    f688a2dce7825d817679adcd51718ca20470b51a

  • SHA256

    fd8e5490f03531fc7f67bc220c94801796c48145fa0ddb9aab00e4e3eb46b4c5

  • SHA512

    2caa7360db6af3cb371dc3bbbff47bee993049a87cc576eb5d02f433ebb9d33fdd62fb60d16b5e6b5c43f8b1e6559221a380bd5991deae6c001a51ef8f43c60f

  • SSDEEP

    196608:YOQsZSgbT/9bvLz3S1bA328SEFOqEYPdm:R1bTlj3S1bO2NWOqEwm

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ivory tool.exe
    .exe windows:5 windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • SC��6@�.pyc