General

  • Target

    NEAS.imagelogger.exe

  • Size

    18.0MB

  • MD5

    d763daf425bdf611ecb1d0414672ccef

  • SHA1

    298b19d4aa06ce8c6d7ca77b6d5948d8a13d1e70

  • SHA256

    0f7446678b96a05a372ba7f269558e59fc52da5b98538ccf93306fae65445c2c

  • SHA512

    bb4dc79e344d413342a4fe8c94ea82637e8b5369df5a71c82e892cb86f4fed5e57ca287bd5c9251ab676340e9da8a999fba77f164f6b4d1db42ee48a04ad40f0

  • SSDEEP

    98304:4KEtdFBgIamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RqBMAT3w1D:4xFSeN/FJMIDJf0gsAGK4RquAeD

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.imagelogger.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • &x�r���.pyc