General

  • Target

    VenTech_Discord.exe

  • Size

    57.0MB

  • MD5

    2ba85597d01764324efa7fcff3b73718

  • SHA1

    d858daf378c49f9371c693992bdf6f90ca29ecf1

  • SHA256

    6b7c46811302a9ef47901ec9fb1a3d90dcaa83a7640c505d9cb38455685a6fa0

  • SHA512

    6cae5ac31de3759dd99afaabfde8015f8ec88600bde3587f0f79a43b28f08f466fa431839666e8ded0727ef0ff2c6a5de53ef6240247587d079486af2b2cfc6f

  • SSDEEP

    196608:rYQsGbT/9bvLz3S1bA329OqMabdCONlJIA:GGbTlj3S1bO29OqXJNlH

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VenTech_Discord.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • loader-o.pyc