General

  • Target

    RicksclientFIXED.exe

  • Size

    22.0MB

  • MD5

    2e07a5bc65d00c4ec24b3380a8a2aaf2

  • SHA1

    f1d709cfd561183b5ef48db6fe511e6b9e2b11cb

  • SHA256

    aa2bed12d209af72a8470e974be86ddbfa514f3282b45a0081a5bc33d7bdb0f0

  • SHA512

    f00453b9eb22d08514468ec5a9e69ada3384ba791c96e688937c1c3148f4c82741ca3bce4dd2cfb9e1442a6335f0f11284b4703e61ce84ecdd5df23ba4b77915

  • SSDEEP

    98304:jIEtdFBmamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzDgsRuGK4RZ8kQB7V3aXKT0:jvFFeN/FJMIDJf/gsAGK4RTQpkKT0

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RicksclientFIXED.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • 9)lf� .pyc