General

  • Target

    Reaper.zip

  • Size

    13.5MB

  • MD5

    b676070ab6bbce89b3f26bf987b15d4e

  • SHA1

    01b32d75b59596f8b7d2dab09a59b1836920cac9

  • SHA256

    f8d0ab60a7bac50998a04b38316c179ecc5134e4964e4c286ea2f39653c6bd11

  • SHA512

    f0c537c45531d1f687e7b837b1b092a33edbb61289788cbfff85c21b25be0dbb0e72d3854662ed427a007f76a585be568ad7c60f39d63da975f4edf704d2f1f3

  • SSDEEP

    196608:MtFqvKfI4lmKV4SvEoEWnVyreWgAThlRpdD/zDy5Vu9hzH6VUBqPN3:MPnvlEo2fThlH9Py5VcFHKUBa3

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Reaper.zip
    .zip
  • AutoExec/script.txt
  • Bin/FpsUnlocker.exe
    .exe windows:6 windows x64 arch:x64

    8a30acffa5d4e68c6f30f1c14d9a5f09


    Headers

    Imports

    Sections

  • Reaper.dll
    .dll windows:6 windows x86 arch:x86

    615138fe2fa1806ffa5686c81568e1f8


    Headers

    Imports

    Exports

    Sections

  • Reaper.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �Q���`�.pyc
  • Scripts/Aimbot 3.0.txt
    .js
  • Scripts/Aimbot.txt
    .js
  • Scripts/Alt+Print.txt
  • Scripts/Arsenal Kill All.txt
  • Scripts/Arsenal.txt
  • Scripts/ArsenalHitboxExtender.txt
  • Scripts/BRM5 Tp.txt
  • Scripts/Bacon Hub.txt
  • Scripts/BloxBurg.txt
  • Scripts/BloxHunt.txt
  • Scripts/Boys And Girls Hangout Gun.txt
  • Scripts/Btools.txt
  • Scripts/Build And Boat For Treasure.txt
  • Scripts/CBROKillAll.txt
  • Scripts/CC Aimbot V2.txt
  • Scripts/CC Aimbot.txt
    .js
  • Scripts/CMD-X.txt
  • Scripts/CTRL+Del.txt
  • Scripts/Click TP Tool.txt
  • Scripts/Coco Hub.txt
  • Scripts/Dark Hub.txt
  • Scripts/Dex Explorer v2.txt
    .js
  • Scripts/DexV1.txt
  • Scripts/DexV4.txt
  • Scripts/DivineSisters.txt
  • Scripts/EclipseMM2.txt
  • Scripts/FPSBoost.txt
  • Scripts/Fathom Hub.txt
  • Scripts/Flee The Facility.txt
  • Scripts/Full Bright.txt
  • Scripts/Globals Script.txt
  • Scripts/Infinite Jump.txt
  • Scripts/Infinite Yield.txt
  • Scripts/Invisible Fling.txt
  • Scripts/Jailbreak.txt
  • Scripts/Kraken Hub.txt
  • Scripts/LucidityMM2.txt
  • Scripts/MM2.txt
  • Scripts/MM2Autofarm.txt
  • Scripts/Mad City 2.txt
    .js
  • Scripts/Mad City GUI.txt
  • Scripts/Mad City.txt
  • Scripts/Mad Emotes.txt
  • Scripts/MeepCity Plus.txt
  • Scripts/MheeHub.txt
  • Scripts/Murder Mystery 2.txt
  • Scripts/NoClip.txt
  • Scripts/NoClipKeybind.txt
  • Scripts/OpFinality.txt
  • Scripts/Ori Hub.txt
  • Scripts/Owl Hub.txt
  • Scripts/OxieHub.txt
  • Scripts/Phantom Forces.txt
  • Scripts/Prison Life.txt
  • Scripts/Prisonware.txt
  • Scripts/Remote Spy.txt
  • Scripts/Reviz Admin.txt
  • Scripts/SharkBite.txt
  • Scripts/Simple BloxBurg Auto Farm.txt
  • Scripts/TopKek V3.txt
    .js
  • Scripts/UnitClassifiedGUI.txt
  • Scripts/Walk On Walls.txt
  • Scripts/ZyrexHub.txt
  • Scripts/oofNotoriety.txt
  • injector.dll
    .dll windows:6 windows x86 arch:x86

    d588e0751eeca8d75865b11d7d0b6027


    Headers

    Imports

    Exports

    Sections