General

  • Target

    Full function.exe

  • Size

    8.5MB

  • MD5

    a6a873c77f5d0f716f7f7b2ff6916493

  • SHA1

    7269e60b586aa889b381785c78fcb3680bf7167f

  • SHA256

    767ac3cc14009d16d9af96633ed93b23afca7b34e386ee503f8b9c983c978c37

  • SHA512

    c7dc51d80bdf8f77423d189a3e0001cbfb0303ec16f58cb87bb60c6910ddcc4d6d32cca435407e168209700c8389c9e371c22367182874869165923f641c7797

  • SSDEEP

    196608:paM0rtxcvaZTyT9pkI+ysDBPI4sWHqVcUhEvoNfoGCnTZJetPOhhU:HUeiNyhyEIqVcUevoNELM4

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Full function.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • loader-o.pyc