General

  • Target

    Xeno.exe

  • Size

    15.0MB

  • MD5

    04b2c19a85942cf8cc90da13614c0ef4

  • SHA1

    dd1faf6582fa06a5170d41784d98b5f13d6617d5

  • SHA256

    38e5f1ab6aacd1daafed5a664f3039204e93149c6233f7e9ad1e1d7ab4f04afc

  • SHA512

    0ac58041577606566efae3989edbf36c7c8f3fe44d063077b993209b6f4506c224376063565b070b69a6db52158813b9b4b67a63b1cca50c987ecd8c3f9e2639

  • SSDEEP

    196608:WVD+kdgZwfI9jUCBB7m+mKOY7rXrZusooDmhfvsbnTNWr:S5bIHL7HmBYXrYoaUNs

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xeno.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • "�FJU�.pyc