General

  • Target

    microsoft.exe

  • Size

    43.5MB

  • MD5

    be9e8fb73b22891d21ecd788a4d47e7f

  • SHA1

    d75b63336eff598cb3bd8746de7533ffb136a234

  • SHA256

    7a4241f819d47a45314715488b9d4954b90f82200291a0f7b013ae478b861d1e

  • SHA512

    6afd0a3c19727cf7013e8deba871c317b3e4ca97ffc86e44654b223a44c5adb3279d6e5566f36ccd339cfb03ef5d8bd7c300904b8c0d8abf575a9f73ec0b2a5c

  • SSDEEP

    786432:Rm6vbTKEfuJr4I1EWCMcDjz1yhWZldoBVpYCUPvKuPnsRzoZy/pW6Kz:RnvvKUuJrEpwW+9UXVneEqHKz

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • microsoft.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • *Ȫ� �5.pyc