General

  • Target

    keyauth-bypass.dll

  • Size

    7.7MB

  • MD5

    097e6459c5b66998c3bcfef3c1893856

  • SHA1

    c5cb16d016f563de5b23752fa8ab5500edbcec2b

  • SHA256

    1195c31aadf88e68509a597c09acc50116471809eb40e28d685c4c95658e860a

  • SHA512

    de207e027556d92685707ea30aa1d559c2b27eb6c4376e7fad50f130a75273ed9aa6629830f506f698f91ca055b1f511e807660a8cad7bd5b360c649c32fdfed

  • SSDEEP

    196608:q5gVVEDSwfI9jUC2gYBYv3vbW2+iITx1U6n:3VVEDxIH2gYBgDWJTnz

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • keyauth-bypass.dll
    .dll windows:6 windows x64 arch:x64

    178a472b9d243fa0ad6d0ed185f7202c


    Headers

    Imports

    Sections

  • GM�l�.pyc