General

  • Target

    CHWOOF.exe

  • Size

    7.8MB

  • MD5

    cd7c1519dcd6ff3d8bd7cf3bce8a3e67

  • SHA1

    c6daf475a099901bd52b494fc5babaed5d2814e7

  • SHA256

    f565c4996518b581f2e9bdc671f4f29b40322fe04504ea6e8fcd40e7efa37e2d

  • SHA512

    4c224f9c5314055c2269bff02f886f90257e1e514a71eeffe95756684e6d3d4c4e79dd5c8050dbf0bace8f6d911d2d5427f486f0d9abdac780d4221b76af4eb1

  • SSDEEP

    196608:VE0+RzeNTfm/pf+xk4dlX/O2dRatrbWOjgK3:Gyy/pWu4DNdRatrbvMK3

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • CHWOOF.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Code Sign

    Headers

    Imports

    Sections

  • � �X��l.pyc