Overview

overview

10

Static

static

10

Nursultan.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Nursultan.exe

  • Size

    296.0MB

  • MD5

    e18ae93882c28507a03470fbf914eaab

  • SHA1

    d8844d9d3b57a4f3d403d2a41c0769aeef17efb6

  • SHA256

    991fd937d6f356bcf1054e4afc7e0e7a43510d79b2302e198c02b049170a0faa

  • SHA512

    1e7ef9f86c88353a9da08d6ed7cf6c04b9ad2ca18081f1fe7a7b30b80374c98e41f55d4c97b216ee6fd29f2c183410afe14f151c5de1537a031dbd64ef184603

  • SSDEEP

    98304:NtDjWM8JEE1FXAnamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEIA:Nt0tAKeNTfm/pf+xk4dWRpmrbW3jmr+

Score
10/10
blankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nursultan.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �G �r*.pyc