General

  • Target

    TOOL_HUB_3.0FREE.exe

  • Size

    14.0MB

  • MD5

    8381fed67b5d6850b2b2c4038040f88f

  • SHA1

    6e6da3547687dd8dfa53a8b4ce8696094906c35a

  • SHA256

    94e5c8e45be36e6fa91a90d89945a1620b42ad4bc25596b3e4f71f77506f803e

  • SHA512

    357ae647c007522010baaf049d38e0d7fb5541c07fb8f5c48172e529b650f60f892205eaf10380b948e2bca00a30940838d93b6af2ce29a480c7cc22438b87b1

  • SSDEEP

    98304:5YEtdFBy2hamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RWBMsv3o6U:5fFMfeN/FJMIDJf0gsAGK4RWusbU

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TOOL_HUB_3.0FREE.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • hKo �.pyc