General

  • Target

    injector_private.exe

  • Size

    15.0MB

  • MD5

    387a9663e3510843744d7422d4646f3d

  • SHA1

    48c73276e80e6a383e9cbc0e98ec9037c01d1f0f

  • SHA256

    9f39e905c0652c4506dc753286ee2355ac097ab6d2def18309a02240b3d4d3d0

  • SHA512

    d89df4c58d389d129dff0973cf8fb0209d4d1e241762c0cef1d36a46484d2ffd112ef19561d42e24db66529bd8e7943f6a4fa9d402eb6a44436215e51164ccbc

  • SSDEEP

    393216:XxOdnHVA4PL+9qz88Ck+7q3p91JNRqfg:XMJi4z+9q4G331gfg

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Discordrat family
  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • injector_private.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections

  • = ��S��.pyc