Overview

overview

10

Static

static

10

Nursultan.exe

windows7-x64

7

Nursultan.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nursultan.rar

  • Size

    7.6MB

  • MD5

    a8ec4989c64da9c63e8825c78023e336

  • SHA1

    a8e2b32cba485a531ae35dce674a79c15ae92369

  • SHA256

    6f82cc68a2096433ec78add9d6fc07d780917c2e3c0b55625d3c9c59af59ba37

  • SHA512

    2b6024fa0850602e0e8b78de621620d745bb058ab8bc422acdcfc6d5c230fe23f86c27c461ae3f97b943127edaa7f75c59aa0e9af825dac5bcc3754aaf13454d

  • SSDEEP

    196608:FRSH5i/nNrtRJlCLRrTIVpdwyzXceQpUUKuYgA+QHFmQddb/+Td6XrW:WA/nNnfC1r03dz4pseA7lmPdiC

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan.rar
    .rar
  • Configi/clearmc.file
  • Configi/mcvision.file
  • Configi/rapybox.file
  • Configi/rapyprac.file
  • Nursultan.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • '�AھR.pyc