General

  • Target

    j9fHF7fnvks.exe

  • Size

    19.0MB

  • MD5

    b5f4c08cad002e9d67f45f9d8a7a61ca

  • SHA1

    16d1d7be678a058e024e9b621f6aedfa473fa0d5

  • SHA256

    dd45cb0bfa0a4d55a17d915cf12019c5186765f06cebb88c6d10c76c5ec53a6d

  • SHA512

    99b0b603179447a4059d1001b4ce91163d6437173b9bc4c647c4ca35b0febce4f72d897ace49a4ce5da342f45a98835ace3b5dea6d30b43f1d18d303c4527768

  • SSDEEP

    98304:PckwN+MdA5wqMfO8MMhJMjarJaon7JPzf+JiUCS3swhzqgez7DoeZDJ1n6hBnLnj:PcV1RB6ylnlPzf+JiJCsmFMvNn6hVvTz

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • j9fHF7fnvks.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • ���N�.pyc