Resubmissions

04/05/2024, 19:52

240504-yllpfscc52 10

04/05/2024, 19:40

240504-ydg2asgg5y 10

General

  • Target

    fraud-external.rar

  • Size

    6.8MB

  • MD5

    9309fcfdfb4f95954b2cbd0bc5846cc8

  • SHA1

    0e0e4f1d16151152e0dfe79f5407ae6002073936

  • SHA256

    f2c99369e95cf2aa122c56cf26802c4511ebd0400784ecfd74b12fb935d2e877

  • SHA512

    b9a0639e28309cab4c22f727817420246789126035abe7e5938258da0321bc59e4afc596f93bad14ae6a27a0c9c6b5f6e6ef855132a90b538a094bd33a4e2a5c

  • SSDEEP

    196608:42ZyllFMUru0Q99RzFmZsHhJEVtwNYYF2jBhk15liuKP+89wn:42IFMUKJXzysH4OYaUzwn

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fraud-external.rar
    .rar
  • fraud-external.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • F�@�� C.pyc