Resubmissions

19/06/2024, 23:19

240619-3a83tswfkc 10

19/06/2024, 23:16

240619-29c9rs1blr 10

General

  • Target

    EnigmaSpf.zip

  • Size

    8.4MB

  • MD5

    3e2344ca5a2ebb0742b990a09de3143c

  • SHA1

    320f2f2b6acab37c096c6d02978c93032b0d2a2d

  • SHA256

    cfc6d572bd3b9eb1ac7781cfcfc60a1b5c536d1d169d7f19e51298b82df1ed4e

  • SHA512

    afa90edc411de29327f8e78440a64010c20ce8f8d62950f320ce7fd23abe66bde03a64385199356315ac12dcaf4f90f46a6a44c58181c0c6cd7096dbe73da183

  • SSDEEP

    196608:PC+LxQOKIYVkQFsNO5srrI71WdcR9PL+hrg2fZ1sCcyzp38HWad611G+N9:a+t9NO5sY4d48jriyG29ZN9

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EnigmaSpf.zip
    .zip
  • EnigmaSpf.exe
    .exe windows:6 windows x64 arch:x64

    9f6c30aa72dfd6b996e5bfab763d31e5


    Headers

    Imports

    Sections

  • 8�C�� .pyc