General

  • Target

    Neverlose.zip

  • Size

    5.9MB

  • MD5

    faa79770dba4e36580e7ba6ea809bc29

  • SHA1

    9e926f79b63ee81d376061fef1d575b17d7062b9

  • SHA256

    8534a3f47fde6425a97c9cf70c43c3bd1a6c52fb45403ee749894de1dc59a2f1

  • SHA512

    c13e27cd933afe2543ffe973752eec8b2e6e77a7dea3b3c5a34e8c39826c562a153fc7b05b6e4a48f8003358c8216b78d7972dc8426e8209b5bdbdf726ce6beb

  • SSDEEP

    98304:2xHehOElbTaVyZ/1pn6JtTra6m13aNUMUc1zno6CULy1SnAK4nJ77:BOElbTa41BkhNUDULPARh

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Neverlose.zip
    .zip
  • Neverlose.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �GD� .pyc