General

  • Target

    incognitotest.zip

  • Size

    25.5MB

  • MD5

    9e834756aa840af13c45023580e0625d

  • SHA1

    2bedce041f1ac61db6ec510d0840ab40d1b31401

  • SHA256

    f85f02715285ae01d0ac9965d5f45f89ef6c4dae9d76e7086bb4534526cf5ef9

  • SHA512

    d1cd7a0adf53ce80de0667444daf5bf96bcaad63eb79493f7375d1d28b76ee554ff871747d9d530804cb16117328628b286b68a82595126fad9c6eb280f865fc

  • SSDEEP

    786432:MDLqW1/vOgqv0z5dmpK5Zm1An6gAPF9p8tBfn+ZUl:2LRhvODv060Zm1dr9p8zWUl

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • incognitotest.zip
    .zip
  • incognito/Incognito.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Code Sign

    Headers

    Imports

    Sections

  • F�s�%4.pyc
  • incognito/autoexecute/test.txt
  • incognito/bin/api-docs.json
  • incognito/bin/incognito-luau.dll
    .dll windows:6 windows x64 arch:x64

    dfd11645eb4732c0409f51f0532c3683


    Headers

    Imports

    Exports

    Sections

  • incognito/bin/save.json
  • incognito/scripts/test.lua
  • incognito/workspace/.tests/appendfile.txt
  • incognito/workspace/.tests/getcustomasset.txt
  • incognito/workspace/.tests/isfile.txt
  • incognito/workspace/.tests/listfiles/test_1.txt
  • incognito/workspace/.tests/listfiles/test_2.txt
  • incognito/workspace/.tests/loadfile.txt
  • incognito/workspace/.tests/readfile.txt
  • incognito/workspace/.tests/writefile
  • incognito/workspace/.tests/writefile.txt
  • incognito/workspace/IY_FE.iy
  • incognito/workspace/test.txt