General

  • Target

    2e30eb418804edfe3a30d953316291726302097159d949869b2e2a948ee7bbdd

  • Size

    11.2MB

  • MD5

    f3c810bea94ab273f57615521f865520

  • SHA1

    9a60e466aee0087cc54bd31a0f8bfbf21176cb69

  • SHA256

    2e30eb418804edfe3a30d953316291726302097159d949869b2e2a948ee7bbdd

  • SHA512

    d85b45eb38ceffba83dc81cce540e707506bab02279f296ea375bdd3b569f75d8e0eed379d87f1df0e8102dd36bdddbc01926d5483fd68ffba30cd18c7fd426a

  • SSDEEP

    196608:7JB7RvfIdK8Yi8Wp8QC7dQUUddAAgQyTUJOmysvp7FL+ZZD5CDykB7jdWlU29Lx:FBRvfZi8S8N7IdbzygQEvph7yodWaW

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e30eb418804edfe3a30d953316291726302097159d949869b2e2a948ee7bbdd
    .zip

    Password: infected

  • 3b4cd2dd0458f497d5a93352752dfbbe3a687ff95ce866547ce3ac78aa3e2c71.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • �4��?�.pyc