General

  • Target

    5ewXJnNZijeq.exe

  • Size

    8.4MB

  • MD5

    bfc67082a375765dfdf1c9bb749dce2d

  • SHA1

    ec0a21fc7c59caa6a13c490a29f7581f553c3936

  • SHA256

    08dd3434316f3ed8a59067a615a7f563f70355df2f8934de68632ddf9068fb6e

  • SHA512

    01681b9c4853c64924a5d6ca9c7b030b9faece44cec02375480af642a6291b53732f30f7eaef9480fd139ff3e724400d812c4df9693e80cff1b2315011ed75d7

  • SSDEEP

    196608:fjD2JTkdMwfI9jUCBB7m+mKOY7rXrZu5XCSooDmhfvsbnTNWo:7kQNIHL7HmBYXr6yXoaUN3

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ewXJnNZijeq.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • ,���rQ�.pyc