Overview

overview

10

Static

static

10

Vmax kernel.exe

windows7-x64

7

Vmax kernel.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    240908-wf1v3sygmk_pw_infected.zip

  • Size

    6.8MB

  • MD5

    72a510b8baf9d9760b168b266be87076

  • SHA1

    650a6c6d4c831027a9b5a88b296da3056d64d745

  • SHA256

    cbb62e7c6329bb4b29a3a6928004a0511dcd5ea285271034bf7bbd758bea70f6

  • SHA512

    00e2adc86862aa46229682eddb33be7d7358beff54c6485c7d7d2fa841d76834dff4ec261903ef368985a7a46f0c2a12f014beb82a6b2cb8f592ee3cb119b21d

  • SSDEEP

    196608:VKmDTBcCDWcifKjaFy+OXtAZ+ZJnBSkvt:VKmDTBcCDWciyjwMigJzt

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240908-wf1v3sygmk_pw_infected.zip
    .zip

    Password: infected

  • Vmax kernel.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �3�,��.pyc