General

  • Target

    YSL.exe

  • Size

    10.0MB

  • MD5

    0d54621031cdffa9009dd1c4dfae318e

  • SHA1

    04184d399768d18c34de851f20cd0295dca1374c

  • SHA256

    83f5a2f68b73babb2f3b9c137294b41ae8280dbaf2a75cceb42999f375879f00

  • SHA512

    8b6d5f839f49a886b352f7071d2f9ad3c42099d387728feb7002e6e2b281f3ef5f0f0079823a7c957d33a61879819ee68bd7ce75e5b3323d8461c08d929936ef

  • SSDEEP

    196608:BngVVE0wfI9jUC2gYBYv3vbW2+iITx1U6n6:yVVELIH2gYBgDWJTnz6

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • YSL.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1234

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �bү�#Q.pyc