General

  • Target

    paint.exe

  • Size

    8.4MB

  • MD5

    14f0421574fd16a0a6a7ac20fe22482b

  • SHA1

    64974f8d78d54c43775ab2a67e4341442bfeb01a

  • SHA256

    ee5707904b7372b5389df014be575f574497907db3cad4ba45d52adc8f12e0a3

  • SHA512

    4bd79e9c67fc149888ff130c7e41dff166d2c2ba26b1ced48e01f1f8172a18b3c1c8c19643d978c60a1d635c3dc93105ce61931b06f886d6401433dfd8dec899

  • SSDEEP

    196608:eYd1dh3wfI9jUCnORird1KfbLOYFSEcN2oc+nBIdAx:TddcIHOQ76bE1nnBI

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • paint.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • loader-o.pyc