General
-
Target
Gusnabo.exe
-
Size
14.3MB
-
MD5
96285ad4a6fea01eb07e38845b6df174
-
SHA1
ff8e7241f7685bb1418630fd22205408f21e59ee
-
SHA256
01e38e52035112609c5b5630a116aa4d7395b4a0859533afdff18d525228185c
-
SHA512
c35c324efd9ababd4e3ef6d1e1b3ff7376927b1f39c71d057517f9e2950c4cff7887ec47e2de5efd52df1455b7f72f92216107071f1ace295db68c7364b25e04
-
SSDEEP
196608:z1Ekv0sKYu/PaQ+DuXJpjyEDfyGgMwBdnpkYRMz8NJ7cwRtlLXhrTL5U/hpet:REkZQNDfDgMc6ArBLRfLuw
Score
10/10
Malware Config
Signatures
-
An infostealer written in Python and packaged with PyInstaller. 1 IoCs
-
Crealstealer family
-
Detects Pyinstaller 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Gusnabo.exe
1af6c885af093afc55142c2f1761dbe8
Headers
Imports
Sections
-
Gusnabo.pyc