General

  • Target

    dotnet-sdk-8.0.201-win-x64.exe

  • Size

    12.0MB

  • MD5

    20353dd57e87d313eb263b626bd425d5

  • SHA1

    aa5aced99032f043609ec00ee437c5ace42fe0c4

  • SHA256

    9cf1bda60882ebd156915d43176c9ef98fb534999c4f110063450ce77a6ac1ec

  • SHA512

    ec84200bee16f6a1dd5d9d1a150ccf546730f494386ec1256a58768fb83565b86ac8d951d5ff944c121d64e9b393f8a6295fc4426c60d0cb0c8e3b9ec0686d25

  • SSDEEP

    196608:fwFIQS1eN/FJMIDJf0gsAGK4RLuAKCr28:hQ//Fqyf0gst6AKW

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dotnet-sdk-8.0.201-win-x64.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Z#~~�.pyc