C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb
General
-
Target
a968f7738c801b8528bb717d3928ee75523833a882bdbc4b03bdc6e8ad4cb41a
-
Size
9.2MB
-
MD5
49d267c77ead1c3fa6771fbc66a8b6af
-
SHA1
3d0cc3050c586be7fb30dc34b79578f139bf8f53
-
SHA256
a968f7738c801b8528bb717d3928ee75523833a882bdbc4b03bdc6e8ad4cb41a
-
SHA512
8e2f9d9258867e648d26d359061239cccebe6669daaf57a843e53d2049e6176f944e8576ff33ac0c71f9183c49e44e1f51489718962a33d9e8a155d26fdbd7f0
-
SSDEEP
196608:lf8wZFR/l+SbRZEs4O/kNOqjoVq+4UIThroTj74d1m8qQKL+37OJ5Pi:lkI7/l+SbRZq8cORq+EThhdvLrQ5q
Score
10/10
Malware Config
Signatures
-
A stealer written in Python and packaged with Pyinstaller 1 IoCs
-
Blankgrabber family
-
Discordrat family
-
Quasar family
-
Quasar payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a968f7738c801b8528bb717d3928ee75523833a882bdbc4b03bdc6e8ad4cb41a
Password: infected
-
268934cf9ac4371ad4e8afdc7e354cce287e9f2ce019df0797cc354b3a2efca0.exe
9222d372923baed7aa9dfa28449a94ea
Headers
Imports
Sections
-
= ��S��.pyc