Resubmissions

29-10-2024 22:04

241029-1yx95a1aqg 10

25-07-2024 19:49

240725-yjp9vs1bmr 10

General

  • Target

    retun.exe

  • Size

    200.0MB

  • MD5

    57bfb36b08a68eacecc64d77211b69b9

  • SHA1

    db6ef4199dc49868b3bf713915057e6721c8b7e5

  • SHA256

    2f8c8adc872d77bf4cbc46bd3f197fe9a3f71f511b3bb9e8af96f83fd7f509e6

  • SHA512

    bcb3119f72bda2b9a247bb695154055ad74708eb444d2bd25400847fe8112da9b8210d0df94f71b4daec18776ca1948d8702f17f766234830d0a4dcf811f2f7a

  • SSDEEP

    196608:1W++z9hoy6EnWLL0kiR+dy/YXsK0hn6ksV5:1WXRWyuPMR+dyLhO5

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • retun.exe
    .exe windows:6 windows x86 arch:x86

    ec4c6449b24c9d32ab43eca7a329e0d7


    Headers

    Imports

    Sections

  • �����Y�.pyc