General

  • Target

    Thunder Windows.exe

  • Size

    30.0MB

  • MD5

    40da64079a1492a736de70a4b5086184

  • SHA1

    b4f84954f3faa5538fe28c71754acd99891671a9

  • SHA256

    940483fbe3b82f968b3ce0b9572ef3eadde535e83f72fbf66a3c3b35433fca1d

  • SHA512

    0fbdaf6cce6548d200ee77173335b59825976077a4403e9d88d353a06bb191ac80ed2c540024a45f55b57b49dd73283d6be2db06f9ddcdf074390adca501cbf2

  • SSDEEP

    98304:ai9kwN+MdA5wqMS8MMhJMjarJaon7JPzf+JiUCS3swhzqgez7DoDZDJ1n6hBnLnE:a+V1tB6ylnlPzf+JiJCsmFMvcn6hVvo

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Thunder Windows.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • ����dS�.pyc