Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Nexus.exe

  • Size

    11.0MB

  • MD5

    140ae0d5516849cadb31d932a0780588

  • SHA1

    815951c7ac145e7898847b33b948749de81f6243

  • SHA256

    a9481b40bb16015a8fadc863010b009811cd4186c20dd85c14a911f05fecc07f

  • SHA512

    dbe06b50881d1fdb4a4351d8c0c78c5d137ab49aa0f26a82f4d7efd9d35193652912afaaeb502c01fefa4cba368be6ad1d176f312bbad023bc773811770809a0

  • SSDEEP

    196608:qDprEhDTzPykT38BgIVh0e2yOALeNTfm/pf+xk4dWRatrbWOjgK9:syTbuBlrPOdy/pWu4kRatrbvMK9

Score
10/10
themidablankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nexus.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • F�Ș�`f.pyc