General

  • Target

    psa.exe

  • Size

    17.4MB

  • MD5

    9090fdb646cf75703516554527dc8771

  • SHA1

    107e0032b624e857f69f92a7e3e6bae7cfe59677

  • SHA256

    ebda08ac6b4680d4ab63703083661a48a6a61e56dbcc59da8a1f6c98615ace46

  • SHA512

    e7e3c85bd07262bee389995f533e22da955d9086a33604feba118539ca35a350def25760a965e4b96bb547181488b0fbf3118771991b0c84a1759efa651a82c3

  • SSDEEP

    196608:evT1ZR5oQci3rSBLHh2mlZ+sxf0wZhurErvI9pWjgU1DEzx7sKL/s1t3AkjUWlRt:eb13TSBBXxf/TurEUWjhEhn01tt99/

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • psa.exe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections

  • 늷H Sw.pyc