General

  • Target

    a879fcea4ce6f6041ffc6271c261cf6fc09ec21ac118db277572ddf7b08e8708.exe

  • Size

    7.4MB

  • MD5

    95567cf5f31a7d7f34ae092e68f9999d

  • SHA1

    5e0d1a179f0a14e9939e8056e46846bc7eadb2bf

  • SHA256

    a879fcea4ce6f6041ffc6271c261cf6fc09ec21ac118db277572ddf7b08e8708

  • SHA512

    d2a3b4794029344158ad84e6e5fa89d8aaecb98712424c6ff1b6076b2c15db133b1b4f35d3fc22013948cf65eaa40bab649d9f4c2d2e223afe86d8131a7dd837

  • SSDEEP

    196608:xh2UKt18urErvI9pWjgaAnajMsK23fQC//OoLxh:Gt18urEUWjJjYoo4jLxh

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a879fcea4ce6f6041ffc6271c261cf6fc09ec21ac118db277572ddf7b08e8708.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • loader-o.pyc