General

  • Target

    open if you like men.exe

  • Size

    20.0MB

  • MD5

    9e957472e1e7d9b1dad366514751b366

  • SHA1

    6446b56a27f02db737946313b65b35da0dd8e67b

  • SHA256

    d3e31e51245e3f11ef86da0eaa102d42bff525e431fa51543eade45f2d191576

  • SHA512

    79382db19e9ad61e33320c32297f04839a18998b2012566ae58817a6ceb63ee1363d192f25833097a2707a6bffb894c7389181c6b8e90d64ed317c1fcdf03978

  • SSDEEP

    98304:SHeYgI6OshoKyDvuIYc5AhV+gEc4kZvRLoI0EJfNA3z5UTbBv9JTSPhlVtQo1fY:S+YmOshoKMuIkhVastRL5Di3tKBSPJY

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • open if you like men.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • �""'z��.pyc