General

  • Target

    i hope no virus.exe

  • Size

    7.4MB

  • MD5

    3a8b9142f0e8aec2e36f3405250e63ba

  • SHA1

    b1564101bf5de62a42778505a771d6348f858a14

  • SHA256

    68bd3d0604ca8d5073b95e50807f4b6cbb3fe09b4e4ca09eb795d97adf7ca31c

  • SHA512

    2bb7d31a7a32b225e3da069fa0c5db76757e339a2863d48194a26427de8c85ddaa44671b28c2e23f1fec127a673bf72805df7be788623a5be42380c57af2cc56

  • SSDEEP

    196608:GC0nkeNTfm/pf+xk4dWRMkrbOIWoc3kHTy:yy/pWu4kRMkrb1ZvHTy

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i hope no virus.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • loader-o.pyc