General

  • Target

    46c6ca93a79b4254a164d4604f4d3b50N.exe

  • Size

    7.5MB

  • MD5

    46c6ca93a79b4254a164d4604f4d3b50

  • SHA1

    5eadbad27a40048601bee37daac90e63e2a7beab

  • SHA256

    e1d36aecea876c930cc56137e1d1ba1f9f0397330f511ae259d9f50f3e04ce80

  • SHA512

    bb6739d4c8fd15d8588830996fd03fe2d54c54b70afcacdbe041ee2e7bd556f62c9da12add62729385bf984b2183b1bfcf7c4d86f868f3ef5c7226d31ff1b1ac

  • SSDEEP

    196608:uJqQleurErvI9pWjgN3ZdahF0pbH1AYSGrUnig+ICz0fS1x:nurEUWjqeWx8GrgWLx

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46c6ca93a79b4254a164d4604f4d3b50N.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • loader-o.pyc