General

  • Target

    ValoaimV8.exe

  • Size

    20.0MB

  • MD5

    4ed9006d9970ee5f1ee6486cfc663ee6

  • SHA1

    258fbba6e43c23ad9680576cc51a7c0906387354

  • SHA256

    443be4b5119ad344755137062321a4f5c249e8fb95482183c21378ba93fd96bf

  • SHA512

    952750f7e1a1182ed69ef837b0ea053a66ef1f65d8a534a2a445a660677fc19f2eca6aa66e25e6bafedd94bbf9ccd99e3feea63b0bbd8a36d8683f67c2c63daa

  • SSDEEP

    98304:zrcxzdbM+Q2y+aq0mGRk2jOjFgFQlwq4Mjk+dBZtu9xTtwz/aer6/BbQEJ1nL2hS:zrcbf0mPEOjmFQR4MVGFtwLPCnL2hVcr

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ValoaimV8.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • L���Q:�.pyc