General

  • Target

    cherax.exe

  • Size

    17.1MB

  • MD5

    3650491e049463513f7d36d0a1f450ae

  • SHA1

    356e64703c152dfd458bbedecd32d23301e0e7ed

  • SHA256

    3b4cd2dd0458f497d5a93352752dfbbe3a687ff95ce866547ce3ac78aa3e2c71

  • SHA512

    0e613e3ea69ae7663a1102f57368431a08aad9bdd05a0216e13b7dbffae8f554ae52e9a39545e03713f5560ad4e3212a66f727e176a1c67a0a2dd211a1134fe0

  • SSDEEP

    393216:pYSj0YePHCv0AW8mb+OshouIkPftRL54lR:pYSj0b/KFFmXwouTtRL

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cherax.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • �4��?�.pyc