Overview

overview

10

Static

static

10

NordVPN.exe

windows7-x64

7

NordVPN.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NordVPN.exe

  • Size

    6.0MB

  • MD5

    ae5416807f18c0a4e856c127cbf74115

  • SHA1

    374d0fc4abe68b6285b50109a103bbb307f24ae6

  • SHA256

    beb65995d829b89cc4539252451c804767efd3d5b2013e40f0abf07ed82a1007

  • SHA512

    8db2aa4bf26c5fa0e46dc55cfa121065de944a15c00582dbe25c2dfe73e3a1dec3e387e43db33ae882622db7e67c796eadee2d8c235c6ab3a4094474ad980f3b

  • SSDEEP

    98304:YXEtdFBCRfamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RNOuAK/3V0olr:YmFIMeN/FJMIDJf0gsAGK4RIuAK/Kolr

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NordVPN.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • ���;ȟ`.pyc