General

  • Target

    CloLessBot.exe

  • Size

    219.0MB

  • MD5

    6f7a7662d936009a350a3f61829860e6

  • SHA1

    ba61a5fdc0608b7d8570c6f5e6cb3528819f04f4

  • SHA256

    60cf21060b18390dde36f44dc4474ebc9f09bc039c1539eae138fc56352f2ef2

  • SHA512

    fbfd7b988e71e52018d57af2213c8e3b17950e0ec0ae7df34c032007ec6e71605c06850e1699f240fbb3c1fcb8fda257f7fc9f11d0a7a6affdccc442c2a6afb9

  • SSDEEP

    196608:fJFCvUheN/FJMIDJf0gsAGKRX/O2/R7kB+WZQ:aJ/Fqyf0gsENZ7kcl

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CloLessBot.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • O��:a.pyc