General

  • Target

    AMDupeExploit.rar

  • Size

    6.7MB

  • MD5

    6a082af24d420bdcc6f63c23fb641589

  • SHA1

    4aefd2b3432f052336d2716fa5881304cbcd68a2

  • SHA256

    aa5b7367b2b86a3b6e6847a7b168d153e1267c84da8e60b7c9a92a5dfb504fe4

  • SHA512

    ab0018b9b00e57a7ec8db9d4d734cc9d4e3de2814b8ef6559acb1fb0fad540a62a179ac50d368a1a58d05653dc4499bb4c7578b8b2b9b84de5f9b22277d252c0

  • SSDEEP

    196608:T8591bzyr9dtk9k5ADOWgimO1iw9YcH3b1XjUXAH:T859JWr9PkmlWgTSmcH3BjUY

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • AMDupeExploit.rar
    .rar

    Password: 123

  • AMDupeExploit.exe
    .exe windows:5 windows x64 arch:x64

    Password: 123

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • y�lrz�B.pyc