Overview

overview

10

Static

static

10

antivm_protected.exe

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    antivm_protected.exe

  • Size

    17.4MB

  • MD5

    4a2d61f871e697e9597b5040c092b60c

  • SHA1

    bdbe9b2bd6310e49b14abecb1be753651d2da4c3

  • SHA256

    a575a84f546b91a9ed44fc6c1d37e8007e182f62b268520c3bdd6b4ed062519d

  • SHA512

    72f5fa91520a221fee06a0350ace368dfd44f9459cf0180f513c57a38f3376ebc42043677ce15bf32b18a957e61e4582f3a102c4b855b5c3103762d7813588fa

  • SSDEEP

    196608:tFqGElbmxaohsrV1/55GfoKWQCwuLx2urErvI9pWjgN3ZdahF0pYH1AYzCtQsNIB:qG6bGruV1/5MfdHurEUWjqeWoE6nAv0

Score
10/10
themidablankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • antivm_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • 5i��O��.pyc