General

  • Target

    RedHatHelperV5.exe

  • Size

    13.0MB

  • MD5

    61ff9510f318fa0a7f14b606ed454134

  • SHA1

    45c7af4a32d9689ab90eb0430feb6c62db1eaebe

  • SHA256

    4c6bbe52f702c5d704c576f2fd451db989c73ff37baa39682c4484375a19acb7

  • SHA512

    d7d2b44516404602a3e5bbe32d24933a07dcce8dc70bed7cb60185d110cc02cf849b59e9e7d23228b1ef07b22fea73368ed9cb29ff4bdb4e9c78d9090cb93ee0

  • SSDEEP

    98304:YRNEtdFByj1amaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RKBMSE3OfsVTv:YqFMjQeN/FJMIDJf0gsAGK4RKuScVTv

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RedHatHelperV5.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • &4�[D�.pyc