General

  • Target

    processhacker-2.39-setup.exe

  • Size

    9.1MB

  • MD5

    72ca68dab040d6e5472cc879f5abcb3d

  • SHA1

    3f8c3e48519ee8a79384db947243120d99480c91

  • SHA256

    77f21688de74a0654e2e34c2fbfc0ba83520d32f0a805df3f12b1f74966af7e0

  • SHA512

    80f6ce1934aa7bde13176888390bf029bd9608a7374153e5413e3b08df80a47153dbe359ed809ba4d457eb675246a96fcea3ea6c5d141153786635b52f27dbe1

  • SSDEEP

    196608:k9kV1QB6ylnlPzf+JiJCsmFMvon6hVvvJn/ULRjVZdLSE:WBRlnlPSa7mmvo+J/IjtSE

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • processhacker-2.39-setup.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections

  • �l�K?.pyc