Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    rc7BYFRON.rar

  • Size

    7.0MB

  • MD5

    ee51de74ab965cd3ea75e5c2348ab87d

  • SHA1

    8203c889df96dedc63363c57c8f48d6d0aa01517

  • SHA256

    194a4f15ce6a93139d03ad4c36c75c9d572859332aa301399953f335669eaa2d

  • SHA512

    398e2b988c7c94803709140e874cb7d32aa48c29e25defc2ecb15800dc88d00449d47c91ae154f39c2f5087bfc253c4dd95278d0752f0c3edeb4f65c83b8b9b2

  • SSDEEP

    196608:Gve6gcEIBJAAAOQkTB/r1w4RSs00nmkeF2hY:GG6gFKB/xNxFmkeF2e

Score
10/10
pyinstallerblankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • rc7BYFRON.rar
    .rar
  • rc7BYFRON/Memcheck.dll
    .dll windows:6 windows x86 arch:x86

    1c59cf78871a3ab9538ab32aba46e195


    Headers

    Imports

    Sections

  • rc7BYFRON/SciLexer.dll
    .dll windows:6 windows x86 arch:x86

    3b72631172d339536ffabdc8547985e0


    Headers

    Imports

    Sections

  • rc7BYFRON/lua5.1.dll
    .dll windows:4 windows x86 arch:x86

    df5ee731556844566bd09eb9e0c19cfb


    Headers

    Imports

    Exports

    Sections

  • rc7BYFRON/memcheck.CEA
    .dll windows:4 windows x86 arch:x86

    df5ee731556844566bd09eb9e0c19cfb


    Headers

    Imports

    Exports

    Sections

  • rc7BYFRON/memcheck.CETRAINER
    .dll windows:4 windows x86 arch:x86

    df5ee731556844566bd09eb9e0c19cfb


    Headers

    Imports

    Exports

    Sections

  • rc7BYFRON/memchecka.CETRAINER
    .dll windows:4 windows x86 arch:x86

    df5ee731556844566bd09eb9e0c19cfb


    Headers

    Imports

    Exports

    Sections

  • rc7BYFRON/rc7.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • loader-o.pyc