Resubmissions

08-06-2024 13:49

240608-q4mqgada79 10

08-06-2024 13:45

240608-q2gfnscb3s 10

General

  • Target

    Danger-MultiTool-main.zip

  • Size

    8.5MB

  • MD5

    9d7e69eb59178c2c8a5cb30ea2cffb2b

  • SHA1

    077e4230fedb512dee79b8de3a2db4bc1e3861db

  • SHA256

    64cbe38d240af0d473e99da2880b6b24bda99c2e080d743ca70a7c63c6c39082

  • SHA512

    ff918fc2b5863c4425d2b49b0a0737bd7d01973c2547437216608e7527fa8bcbc0d0edb39ac16702efd06cc43fc9e4ef98c1c6ae276baeda3a228ebdd9779d49

  • SSDEEP

    196608:evtyXaw/YhZIINyMGkXmyQscGZ0UDh9eAxcqctMy4yD:eFyqEqIINyMGkXUscGFDh9eAxYlD

Score
10/10

Malware Config

Extracted

Family

xworm

C2

45.83.246.140:30120

Attributes
  • Install_directory

    %AppData%

  • install_file

    runtime.exe

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Danger-MultiTool-main.zip
    .zip
  • Danger-MultiTool-main/README.md
  • Danger-MultiTool-main/requirements.txt
  • Danger-MultiTool-main/src/main.py
  • Danger-MultiTool-main/src/utils/Data/Amazon_Gift_Card.txt
  • Danger-MultiTool-main/src/utils/Data/Ebay_Cards.txt
  • Danger-MultiTool-main/src/utils/Data/Fortnite_Gift_Card.txt
  • Danger-MultiTool-main/src/utils/Data/Roblox_Gift_Card.txt
  • Danger-MultiTool-main/src/utils/Data/Steam_Gift_Card.txt
  • Danger-MultiTool-main/src/utils/__pycache__/cpython-311.pyc
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Code Sign

    Headers

    Imports

    Sections

  • �4o.��_.pyc
  • Danger-MultiTool-main/src/utils/upx.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Danger-MultiTool-main/start.bat