General

  • Target

    Bullet_0.5.2.zip

  • Size

    5.8MB

  • MD5

    d7f0b1d8277510a477d208daf51182d5

  • SHA1

    d7e1435145536284c544aabb43018c33d3026d73

  • SHA256

    b6b5f9ecdff9cf0eb00514778c7c636ebbccf553dd63702669a2e15b2d593dc3

  • SHA512

    5f32c65a46b635f93a509736e0222f245cf3290ae7e5e35177b215920b108ed78982ae30f1784dfece95ad26c0c4c5d580163f6c2b14b425b1b0cd68c3ef61c3

  • SSDEEP

    98304:YIXUJdFB16QucHrb7eOKaTcxHJNCDtr9LBAPff4CdM2MszWuYyvmLC6pe9Tz:yFH7eSQ/NIAffnlMsquYyvmG60

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bullet_0.5.2.zip
    .zip
  • Bullet/grabber.py
  • Bullet/main.py
  • Bullet/requirements.txt
  • Bullet/start.bat
  • Bullet/util/deleter.py
  • Bullet/util/destroyer.py
  • Bullet/util/lookup.py
  • Bullet/util/req.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • ��ec��.pyc
  • Bullet/util/snuker.py
  • Bullet/util/spam.py