General

  • Target

    ArabGrabber.exe

  • Size

    10.0MB

  • MD5

    faad9e3f70944c7f74e09ab715ed9866

  • SHA1

    4852b72936db911b67fbcb7d8513f8f155a855f6

  • SHA256

    b329e03a2fe7ab9d7e6190660fca6fd038e41bec6c7452af07e6edd6616b6bec

  • SHA512

    b2d08220b3fe62126271cf76b09af728ed185769614785063813fbfe2df5ec6c8da92c4c61ad143ae170c4b4c45d4b811e12796fd2038983ca2c02628808749e

  • SSDEEP

    98304:RbEtdFBmamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzDgsRuGK4R8VIQB653zEF3TR:RSFFeN/FJMIDJf/gsAGK4RzQ06F3TR

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ArabGrabber.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • n�B����.pyc