General

  • Target

    Built_protected (2).exe

  • Size

    16.1MB

  • MD5

    4f506b6aa469923c97e087eb8b48e161

  • SHA1

    d47b6cd0f30419bebddc79c36c61ec5bfda02928

  • SHA256

    fed56d0c0c9652cb82271bed04870533c81f91a0320ec97a4a5682af72bb3ab0

  • SHA512

    06f2393314e6f21392c5315ba0f42f1d699acd5e986d6d9a3af34741967f17f7e4f9237c9391349b8b5511dde19fc7dcf05c79d1ad95f75eaba956a35f803b85

  • SSDEEP

    196608:+/L0E+KyyE5wXfqaHgI+QCwuLuPurErvI9pWjgN3ZdahF0pbH1AYzCtQsNI/Sx3o:+/n+K8MqaHgyhurEUWjqeWxE6nAvw

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Built_protected (2).exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • ��{�!`.pyc