General

  • Target

    Updater.exe

  • Size

    6.9MB

  • MD5

    f31aec83a680fe7f96b210a87cc1dbbd

  • SHA1

    6c8a03f065f02eb909221bc3aaa84792ef39ab73

  • SHA256

    84ad8527d13faccb7845cf85051c3b5a8abb6deac226a4a1b933b738ff250e52

  • SHA512

    99f83163bc2bd1862a672f77505109c78dbb2469a3d0a8908774ad207cc87f743202be2b6405792b6657e0b2ef684b0849156e06ff23eae0979cc4a72650b7b0

  • SSDEEP

    98304:hCFDDjWM8JEE1FgBamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRpYRJJcGhEV:hCFD0m8eNTfm/pf+xk4dWRpmrbW3jmr0

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Updater.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • >�6c��.pyc