General

  • Target

    Fulloptionxstefanxhigh.exe

  • Size

    8.5MB

  • MD5

    22e2d0bd7428fe188569d961e7cc5a90

  • SHA1

    32e9399959a1d42dcaf9c9d13701a564079ed1a9

  • SHA256

    6b90511f06e3811967740fb65d0280c3537c94fafa5352399fc599233f88b3a0

  • SHA512

    26e2f52463e5400670ae498f3424f9b2bc1739512fc5c4a68e42f25e29a8545f185f7856a453efa329ad6f00699961cd6ca14dd2723fadd8debb09adec9db34e

  • SSDEEP

    196608:LmM0pUPtrjhXBZgIw+ysDBPI4sWHqVcUhEvoNfoGCnTZJetsOGhU:VSU1rRQIVEIqVcUevoNELMY

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fulloptionxstefanxhigh.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • loader-o.pyc