Overview

overview

10

Static

static

10

554ba820fd...31.exe

windows7-x64

10

554ba820fd...31.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    554ba820fd72b48db8cfd0c6f8c56e20675f993408df0504e2d80c2f68dbe631

  • Size

    16.5MB

  • MD5

    ded6f7fee10797b02f8876dad0c84ae6

  • SHA1

    ca2e5e3aa7463fc33444b7a4de5dfa33b3efc83d

  • SHA256

    554ba820fd72b48db8cfd0c6f8c56e20675f993408df0504e2d80c2f68dbe631

  • SHA512

    565fbd16d8b6ee43b61ea8f5e0d5284c9823119b6f7740aa182ecd18c032b2148e8a8ef88661fcd8a89d25e4e0bfaf9fdfc4104d6c76cbfaeab85984babbaca2

  • SSDEEP

    393216:z0EjcTK84e3km6NsyYSzOshouIkPftRL54lRC9l1dy1JC:wE4CsAsyYSawouTtRL/y

Score
10/10
orcusblankgrabber

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
    blankgrabber
  • Orcurs Rat Executable 1 IoCs
  • Orcus family
    orcus
  • Orcus main payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 554ba820fd72b48db8cfd0c6f8c56e20675f993408df0504e2d80c2f68dbe631
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • �H�P�Zu.pyc