General

  • Target

    cheatinfected.zip

  • Size

    7.6MB

  • MD5

    77c9d9a49ea0c2db6523c4da3604ad9f

  • SHA1

    5ca9b5f974bf0146c5cebabb3c7049849d6435e3

  • SHA256

    6bf1daad846fc87fe65a1487eed19f64a71f597ca4850c4b3fab371bfcd6749d

  • SHA512

    30c05613d072db77eed37d884fb94443d90676f809b4d7fb6d4031acf45cf1f377bd75f30282d6681f3b9c2fbb759916b40c388cedf4d8082546fb99e1681051

  • SSDEEP

    98304:plDmwWAjrnic29OD4U1nNoXZcKcvxPhhFs1vX7r8N2hkjRNRNOh7BOogAHESVaTm:plDlxqgmcK0fmL8xjRNRNOjgqZVM3eyy

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheatinfected.zip
    .zip

    Password: infected

  • cheat.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • }pD��.pyc