General

  • Target

    Minecraft_Pollo.zip

  • Size

    7.5MB

  • MD5

    001e90d0d3b2c3188c2387a98d601b91

  • SHA1

    744757959c87a2bedfde4af8de8b52b1f0c3e889

  • SHA256

    8c7254b443cf3da119846b7308521adc7705f1583232ef86d2b215781a7fbba5

  • SHA512

    342e39386b76c6fa34f6b16c9b0ccee7468222bbe363fac36b4d53b34d9018c480d79d96532e68aa825818405032d31189a3749545655271b53082c54327ebb6

  • SSDEEP

    98304:jFzHF2xnfHw2g24w3132uHNdlsCBFyA9hD2X9xLsTnAovfvBbSZ8J/zemBH+lHm+:jFxcQ6pPHNdPrb9hy9JKnZDzttTf1SUU

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • Minecraft_Pollo.zip
    .zip
  • Chicken Minecraft.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Code Sign

    Headers

    Imports

    Sections

  • �h(�,��.pyc
  • Game Data/aswProperty.dll
    .dll windows:6 windows x64 arch:x64

    6d40d5329378774e097f73936c85fdd8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Game Data/aswVpnRdr.sys
    .sys windows:10 windows x64 arch:x64

    fd8c854168014f42d810cb5bb2007dda


    Code Sign

    Headers

    Imports

    Sections

  • Game Data/aswWintun.dll
    .dll windows:10 windows x64 arch:x64

    67e833b7ce44ec2f57be6ce98a4df368


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Leeme.txt