General

  • Target

    work.exe

  • Size

    7.0MB

  • MD5

    cb30f8a8a14ad662caedbd266e9bbcaf

  • SHA1

    7e1ff028a97735704751a8c07316306a786c94a5

  • SHA256

    dd633dc2b0b5db1186c81cd08086aa51b6dadf2b4dc997eaffeb3c1f3ec91f9d

  • SHA512

    23265ff0e905550307720a5d2a27f5c05a786fe42c36a19ca03a7807faa23d3e4c92037c2d9284fda4108319af80c8a97f98dc1238e78697f1930a5020360363

  • SSDEEP

    98304:nfmvITBg6RXamaHl3Ne4i3lqoFhTWrf9eQc0MJYzwZNqkz+as5J1n6ksB0rN9Rh9:nkIQeNlpYfMQc2s8hn6ksqdh9

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • work.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • �{.pyc