General

  • Target

    MiniRuler[2].exe

  • Size

    7.5MB

  • MD5

    c41035e96042553625cf9a14f966e323

  • SHA1

    ea6f2b8111691a962f5c89951bb00fb67351c437

  • SHA256

    9059a9f756024159b2ff0653dcb2b288b3ae7ac87194b6c10b3d8ac03e72b740

  • SHA512

    f58bb90a9a7da73d4c5fcdd0f87c5f300466495f861df7528e1396a4948b734f7dc3765616c3b9775729b21fc10ee24007505003b1a8acdf1d35640bb021c00b

  • SSDEEP

    196608:ohZn7WtqurErvI9pWjgaAnajMsK2TfQU//OoLxh:1tqurEUWjJjYAoujLxh

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MiniRuler[2].exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • loader-o.pyc