General

  • Target

    TDpremium (3).exe

  • Size

    19.0MB

  • MD5

    e9bfbba5a329a935b557d0e86b2a4cff

  • SHA1

    61ffb01f770df1da7fe4f0ab7a7a574881c05949

  • SHA256

    22c9c5f83c825e9d58048ee71f805ce27367d43b25c360ff80e3dd2a1788cc86

  • SHA512

    806a4d4b3d24d66543d03801961b7d8acef97cc2fc9c8b1a28ca7ad0ef3c4974924ca73bb2fcce1fa97e57c9e21707eb66b12def8c5b5dae8894890661eaee4c

  • SSDEEP

    196608:u00cDeH8Ljv+bhqNVoBKUh8mz4Iv9Pfu1D7k:CieHsL+9qz8/b4IBuRk

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TDpremium (3).exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • d qm�m�.pyc