General

  • Target

    svchost.exe

  • Size

    7.4MB

  • MD5

    b8a0e52ab1cfe75d6488f5dc1cc7be42

  • SHA1

    caa8634648941cd907887a848e4b5c663c27cc75

  • SHA256

    30ede8f22753f8e4eafb2e6274315d5fe3af3854b585178db9ceeee5b6fe9718

  • SHA512

    05f69985a0ec1be51a81e25cae2dff53e16e2ea5fef2fc6bb653eca9cb1dea77ef21823a59de4073c18312e945a741ac6797b5e3b03e8a919d14e2b543088f23

  • SSDEEP

    196608:LR0cDpLjv+bhqNVoBKUh8mz4Iv9PPv1DVWhy:CiRL+9qz8/b4IRv3Why

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family

Files

  • svchost.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Code Sign

    Headers

    Imports

    Sections

  • ����kQ.pyc