General

  • Target

    .net.exe

  • Size

    20.0MB

  • MD5

    28f25e18733f88820fef41c6d34dfcbb

  • SHA1

    490587f9bc871206e303efcbebb3746bd7561737

  • SHA256

    6f6109c626ace179bf754e5e27c7f2f2168503c1f7ba1d44346e8be9be1e58fa

  • SHA512

    f1df90cf3e9306d87cdf6c0a6d2edfb39996a89789ddf6b7174bffacc2a87fb931e8d91a8641ec9b19a4f545217d8182a106706bfdc00d2d8cc44717f8f40ac2

  • SSDEEP

    196608:dXV1vOxB6ylnlPzf+JiJCsmFMvQn6hqgdhQ:FuBRlnlPSa7mmvQpgdhQ

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • .net.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • !V1o x.pyc