General

  • Target

    Xtune executer.exe

  • Size

    7.5MB

  • MD5

    2354ad60259801015fbc62b822698294

  • SHA1

    5aecdc16ca8da381ac3c00ed3cd15de9d945b98d

  • SHA256

    89111b47e428b815c880823b9c06645b7d8ec82f24d1333428df4e2b0ace3fb5

  • SHA512

    e5642b6b3a5793238ea381e944d08c145ab7b93c9e57ea4f139ab4a0490feda5341380dd743a9837c3c37a12acb477aa36219170f7271062110a27bac50d03f1

  • SSDEEP

    196608:wMQCwViRurErvI9pWjgN3ZdahF0pbH1AYtWtQsNo/03W8:cVaurEUWjqeWxi6rb8

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • Xtune executer.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • d<���.pyc