Overview

overview

10

Static

static

10

Unbranded ...87.exe

windows7-x64

7

Unbranded ...87.exe

windows10-2004-x64

9

Unbranded ....0.msi

windows7-x64

6

Unbranded ....0.msi

windows10-2004-x64

6

Unbranded ...64.dll

windows7-x64

1

Unbranded ...64.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    last.zip

  • Size

    137.5MB

  • MD5

    742d8949d602aaac9d8e2bef5602a9ce

  • SHA1

    3c4b1346f9985809aa2868dbf153b48739fa7576

  • SHA256

    e2d3e7d233a6202e338bd51a7e14aed42c40920a70ab651d2678a186aa3f4080

  • SHA512

    75e2e177ac95161978626e0c8616690448c4bb4efc8885de2f48b00f079fe81389303da6a9a29835a65b2e9a70b95f7d491bf01fe5b1de21f1192738214d4df8

  • SSDEEP

    3145728:yDvRSXF16h94snjvrWzJxxVjxyI+dbdQcCK:qwU4ujvriJxjeccCK

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • last.zip
    .zip
  • Unbranded NEW AUTH/C3E18AEE287.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • �rР��.pyc
  • Unbranded NEW AUTH/Cloudfare SETUP NETWORK FIX/Cloudflare_WARP_2024.6.415.0.msi
    .msi
  • Unbranded NEW AUTH/READ ME.txt
  • Unbranded NEW AUTH/VMProtectSDK64.dll
    .dll windows:5 windows x64 arch:x64

    1851ff453adce0cef5274e320d5bed3c


    Headers

    Imports

    Exports

    Sections