General

  • Target

    DEVOUR.exe

  • Size

    10.0MB

  • MD5

    ca811f74e36bddc62d665b801f4486a6

  • SHA1

    4982cfffac5cbb7d627cd4d23dc1a5f4dea240eb

  • SHA256

    b8cc06250372ccac1c9d1dbfe734c157ee2608ab2cf4a5660379981b0094ef0d

  • SHA512

    9bde797426a333262851959c429d58d6fb99a202178e2f009d2757c30477d6eb3b9757837ef51046ba8a336a63d19b34bdf7957b2283c886ea8528129f721d45

  • SSDEEP

    196608:k3HYAwfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/j8:xIHziK1piXLGVE4Ue0VJY

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DEVOUR.exe
    .exe windows:6 windows x64 arch:x64

    Password: fdafa

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • ���է��.pyc