General

  • Target

    6jmnk2123k.exe

  • Size

    7.5MB

  • MD5

    1deb99e4abf7579bbd125595cdd63b91

  • SHA1

    90d0fdb7f4ad12c20d06bb9f5650a41606d0b8b9

  • SHA256

    15fbdc60ace508a580454e8895d6ae4e12b488c8ad6e7aeb56d048b4fb5820aa

  • SHA512

    c4a800c4f185f55dbf14006c85e3c06a69cea2ec7df7d041267b93b6148ec7c5aa0fc50cddd50ffe114adb30bf62963034d695ea217579f50385675ec98d2db7

  • SSDEEP

    196608:Lci+sxfkRrNcurErvI9pWjgU1DEzx7sKL/s1tVwkZW2GiofnC3W:HXxfepcurEUWjhEhn01t1W99C3W

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6jmnk2123k.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • loader-o.pyc