General

  • Target

    Furta.rar

  • Size

    9.1MB

  • MD5

    1d264bc259b0d604df96139c988d7784

  • SHA1

    8309f899e6598180e68434189f0f0b1147f74b3b

  • SHA256

    dc21a9a0dad416681c8cd067469387090da078e6c38e9d75b4adb0098e786a52

  • SHA512

    771d6527ff8031f80073f40acd6373975206ca1360b2549d4fb886df34236c3dee033c1fbfb624372fd1e63c6ba8286ce8bdf42fbb32d4b51fce627d5cf9ca58

  • SSDEEP

    196608:DafAXleSLVLTHTmMhJKbsX3WaExu2pGroPU2rxEBvCxCzJNKx8nf6:B0QLTzmJbE0GroPU2WGCzJe46

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Furta.rar
    .rar

    Password: 21

  • FurtaHack.exe
    .exe windows:6 windows x64 arch:x64

    Password: 21

    965e162fe6366ee377aa9bc80bdd5c65


    Code Sign

    Headers

    Imports

    Sections

  • Fq|L .pyc
  • OpenAL32.dll
    .dll windows:6 windows x64 arch:x64

    Password: 21

    a4b0e5455f7b65aa58ed8f672b2233ac


    Headers

    Imports

    Exports

    Sections

  • lua51.dll
    .dll windows:6 windows x64 arch:x64

    Password: 21

    c7efec8e032b0a8d28012d796091a856


    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    Password: 21

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • pass - 21.txt