General

  • Target

    obsidianV3.exe

  • Size

    10.0MB

  • MD5

    66fcd8f921d800b034d43585c9e4aa19

  • SHA1

    9c41e4453457a81c9cfbf5693bba1891eca2cc90

  • SHA256

    ce7728c21cccce1f5c506e33dceeaae49b797e3b4a2873940452bf5914089107

  • SHA512

    b1fe64a465596dbf5a071c3b96135a18a21f78f93ae6b1058c94ca35cb809ec3692c5cf8ba1130e59b45be42e5850f139381d1bb86f94fb285827b3a605a6ae1

  • SSDEEP

    196608:JcHY9wfI9jUCzi4H1qSiXLGVi7DMgpZ3Q0VMwICEc/jQ:UIHziK1piXLGVE4Ue0VJU

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • obsidianV3.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • ��8n |.pyc