General

  • Target

    RedWoofFix.exe

  • Size

    18.0MB

  • MD5

    bcdcfadf96e0bfde243ca0c4e6bee963

  • SHA1

    f48c744d32e5c85f938fc8e37d1db0811430907e

  • SHA256

    f8d7f1d4a72d4e9f8f93c22d72591dc9f12fd012118d6654d428b478414f5536

  • SHA512

    a238b6524f72738a5f933cf0733acfef10fe69f2cc96bda4912679f3a068a4d4db685031542429d8960ed33fac2141db738cfb1cf72fbc34e16081174282f567

  • SSDEEP

    196608:peRQXwuL7urErvI9pWjgN3ZdahF0pbH1AYSEp1CtQsNI/SBmUg:CQurEUWjqeWxQX6nWvg

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RedWoofFix.exe
    .exe windows:5 windows x64 arch:x64

    Password: cheats

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • ���tr.pyc