General

  • Target

    be95ad148b9ac11f653db6e748da23f4d01c2c54de4678f5f377f5779cbe8b72

  • Size

    6.9MB

  • MD5

    c9a304b365b2ec222af490f753b4e68d

  • SHA1

    e2ca96d4f0760b6f6aae24715d7ebda5886d6f81

  • SHA256

    be95ad148b9ac11f653db6e748da23f4d01c2c54de4678f5f377f5779cbe8b72

  • SHA512

    6f8bb9c1ea9c9831bc207ff0583f533fc7664e25d65a7d44a38c036ab34b5059aa314773d6f6b7aa0345385989da66b24ef107366edd338e45479c87f48304cf

  • SSDEEP

    98304:3vQMom/kmLq16TX2OdRqRJIkQPEf/HeyAMZpp+sR+1S68HNl4qMEj1q3j9uMY6q:3sSdcGXndrPE3erMpRkqR5Rk9Fq

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • be95ad148b9ac11f653db6e748da23f4d01c2c54de4678f5f377f5779cbe8b72
    .rar
  • Greber/Create app.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • =r�M��+.pyc
  • Greber/GH Injector - x64.dll
    .dll windows:6 windows x64 arch:x64

    17f06e92accbad4bf3fd533e152297c5


    Headers

    Imports

    Exports

    Sections

  • Greber/GH Injector - x86.dll
    .dll windows:6 windows x86 arch:x86

    4421f7c25c5ae269f274ae9c4ce1f649


    Headers

    Imports

    Exports

    Sections

  • Greber/GH Injector Config.ini
  • Greber/GH Injector SWHEX - x64.exe
    .exe windows:6 windows x64 arch:x64

    75397c8591e1d3c51cbf7f7439f8dd64


    Headers

    Imports

    Sections

  • Greber/GH_Inj_Log.txt
  • Greber/leaked.txt