General

  • Target

    riel.exe

  • Size

    20.0MB

  • MD5

    4fba804220d6245e2da3a509847fda1e

  • SHA1

    bb6f3415ccbcc1c57e3bbe88cd8efa990b6db41c

  • SHA256

    bd05ee3e620f39bbf2579d5db3a614de5003989d2720fb76b122746072fe6221

  • SHA512

    63cefcda1e362f7fc4f78770f4013b707e5f6184c30f747ddfea2c883bad3be7ae5754d6acd3b760cab2a9212b556f7fb4efa84ffbdf58f64b2bef98e1a3b98a

  • SSDEEP

    98304:tR7EtdFBCmmjamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RnOuAKBC4jyV:twFIUeN/FJMIDJf0gsAGK4ROuAKBjGV

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • riel.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • W��5�.pyc