General

  • Target

    discord_nitro_bot.exe

  • Size

    7.4MB

  • MD5

    8f0f2f830031fe52191de03908d08c69

  • SHA1

    859b1fa8b8a320a673da8ae4e465206440f42abe

  • SHA256

    2ee3a02dc9ca646ae58ba473aa56ce347b4ce5776f81e6ff8c7a167b77c1e139

  • SHA512

    f28859e0a9847fdc6efaa067aa3646e6a8115568038f8537ad12b9b72f090eb83d7d521a6094436d3651382a76cb264303319ff87f3db7e38009856c47dede82

  • SSDEEP

    196608:160cD8PBLjv+bhqNVoBKUh8mz4Iv9PJ0uQ0PG:ViWZL+9qz8/b4IAu7PG

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • discord_nitro_bot.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • N��0�D�.pyc