General

  • Target

    START IT.exe

  • Size

    20.0MB

  • MD5

    312476739549378072868ac5b1e4ace9

  • SHA1

    1d39ab2a8ab555b19442da93890f29a31cabd391

  • SHA256

    895016aa995ac9b6c03eddcdbdfbacbb7d296e6d516f09996ec40c39164a1c9b

  • SHA512

    38a9076f03978fed4d5826f5a81c7903538eaa45a3b0e2bd08315602a1bd223fbb6f03edd83e7f077b63dc354c0e990a614577eec939b777ca8704b65a342717

  • SSDEEP

    98304:tR9+WCHTqi65sn6Wfz7pnxCjJaWlpx1dstaNoSwKHf1c3z5MOueAeF99h3kAbLcW:tGrsDOYjJlpZstQoS9Hf12VKXSb3hy+

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • START IT.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • �|�1���.pyc