General

  • Target

    Gay external for gay people.exe

  • Size

    15.0MB

  • MD5

    2d965381fb050e309fcaa3a1da3ebdeb

  • SHA1

    dd3636a6e427e3f6bdbe4a174fc4838bc528e08d

  • SHA256

    43c345fc714b3d1a579e57803d2fcf50e8b88b4307a7b52f9fd67ec246101756

  • SHA512

    45045579827549d209ccc16290047fbed53b49f53c5e8e7f8bc3014abe258dd4838976f0ff3678081770d0468f5f71134e7525b6493fee3851016991bbdf349a

  • SSDEEP

    98304:wHSi8x9XQsPVurErvz81LpWjjUa50ZtPvYRt2e4GFNGjfzfbIbApJo4EAKhOC11S:wyP9VdurErvI9pWjgfPvzm6gsFE14AQ

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Gay external for gay people.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • O9�� .pyc