General

  • Target

    Build.zip

  • Size

    20.9MB

  • MD5

    202c2cc945735ac0d31abe80e837f7fd

  • SHA1

    08a29149a1048a74af1752190593e5096facf595

  • SHA256

    490063206c1049e12cd3e29e7ae9a166950b48c074706aa4e45b467cc1738314

  • SHA512

    886708183358a23dfa84769bab0a7ca5a7aab2e3928fa84d88893b46fa59636391266000be96aed1e4c8edac59e76e923d194cecb0ac0ee5ce95ad9cec4fc8fe

  • SSDEEP

    393216:SuOdVhb6boN5DiEYKNvOwOGWkUURE0hZXR/uOdVhb6boN5DiEYKNvOwOGWkUUl:sLksNwjKNv2qFSEX7LksNwjKNv2qFl

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 2 IoCs
  • Blankgrabber family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Build.zip
    .zip
  • Build/ArcadiaLauncher.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • �Ŭ�-T�.pyc
  • Build/ArcadiaModule.dll
    .dll windows:6 windows x64 arch:x64

    f3c61a6910d0098ef1156e08f3c60502


    Headers

    Imports

    Exports

    Sections

  • Build/ArcadiaUI.config
  • Build/ArcadiaUI.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • �Ŭ�-T�.pyc
  • Build/FastColoredTextBox.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Build/log.txt