General

  • Target

    tatojector.exe

  • Size

    8.3MB

  • MD5

    f2bb991627a08aa06c1fac630b60274c

  • SHA1

    fb9cb6b1a3e5ece8a08d7827c34f5a3e46683676

  • SHA256

    037a46c64f55651b91bdf7dc9f26dbd463fcf2890183383443238dc42f0b7345

  • SHA512

    1bc8972b1261e8c5cd31b1fce76f9f65a0cb5c8d5de58072a8a7fe212a6b914428517876e738ce9fa1c8af4d03c95fb3abb9390f5f43e6e61e7b6e675a582a43

  • SSDEEP

    196608:XabmEzpCwLjv+bhqNVoB8Ck5c7GpNlpq41J2mrl0bk9qtlDfJ:D4xL+9qz88Ck+7q3p91JNRqf

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Discordrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tatojector.exe
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections

  • � ���|�.pyc