General

  • Target

    Krnl.exe

  • Size

    6.0MB

  • MD5

    46032e8d4e1cc74e37f1f06ef685db8c

  • SHA1

    ebea3dfaf8cbbc1136466cf57c89df63fd006d84

  • SHA256

    1d8024cf65c63ae0028e8c07273ea89a9dc3c1628de919c489a76a6b328da409

  • SHA512

    8bfea6978630a15c66b2fcb2275db853c69081a1066b945c293894b72e3b9ca187afad904df4c6c2890543c752d4abaab59d69ddacde7285caf3b951bde00851

  • SSDEEP

    98304:JrfREtdFBCpamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RcOuAKwy4KyQ:JrfwFIkeN/FJMIDJf0gsAGK4RPuAKwz2

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • Krnl.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Code Sign

    Headers

    Imports

    Sections

  • h.pyc