Resubmissions

06/05/2024, 23:33

240506-3jyy8abd72 10

06/05/2024, 23:32

240506-3jnhgsbd56 10

06/05/2024, 23:28

240506-3gbe5sbc64 10

06/05/2024, 23:27

240506-3fjp5agc4t 10

General

  • Target

    BloxFruitDuper.exe

  • Size

    15.0MB

  • MD5

    dfb4bb9b23b92826c8af495bb247e17e

  • SHA1

    3c2f34c52d7d9437d885e0b4c947e40dd407b88f

  • SHA256

    fea9ce90847f7932faca0c56d9e6d4a22d2c152a8280013585c24e1fc40808a1

  • SHA512

    106329cc1bd5207e2824095c0188f098f1bbb6ccf5977bdf47e4e0e8149b622ae9ddcc6c230e1ce1742a82d52d963eec7698da556d02652ac87ccfb8852fe5df

  • SSDEEP

    196608:/rukV1GhAqB6ylnlPzf+JiJCsmFMvNn6hVvT6:4BRlnlPSa7mmvN+r6

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BloxFruitDuper.exe
    .exe windows:5 windows x64 arch:x64

    Password: 123

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • �!"�,.pyc