General

  • Target

    Hanzo.exe

  • Size

    14.0MB

  • MD5

    05e5de564342c25f1f03a3ea242fe2e4

  • SHA1

    128cd3d58db84d04a21037fb40b085432aa0a8fb

  • SHA256

    b7ae4123599abc4a4be3108d6e20afd47afb5ae6c4e30eaf0f750b626f2d92f2

  • SHA512

    b01d62bda6c11188b9e18be4486c69ec8d2d12beae8d3465760f79821d6a7d2cd32e67d5ab4343a0f7964d4ceb632a1ec532b3e79bf1bc6a855322b8b32e0382

  • SSDEEP

    98304:X1DjWM8JEE1FBamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeRiYRJJcGhEIFW0:X10qeNTfm/pf+xk4dWRimrbW3jmyq

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hanzo.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �;�)��.pyc