General

  • Target

    Built_protected.exe

  • Size

    16.5MB

  • MD5

    4079168a1700f0512de865a1111e23c6

  • SHA1

    9c3e0f923609f4f90b9015519e83b6fa90b07ff5

  • SHA256

    21d1e94b572a4cad3ef468670de848cd8f171b786aabfe7dc2ea6a48e9eef25f

  • SHA512

    99627d3f79b22e3cfe3c3cff8f0cd75d71bb78b78ccc84fb9283435771beb3a9d12d6a692f1ee4879e26dbd5aedbcebf8b82c2b940c43b6f2c3a5da3e3b83dd3

  • SSDEEP

    196608:UUo6o7rMyE22G8T7+QCwuLuPurErvI9pWjgN3ZdahF0pbH1AYzCtQsNI/Sx3mUw:nF4rMDG8TXhurEUWjqeWxE6nAvw

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Built_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • ��{�!`.pyc