General

  • Target
    stealer.rar
  • Size 18.3MB
  • Sample260905-zh4arssdpc
  • SHA256 b32dfdcf3ab0b0fb1ec26190dea85000091f902ce2b601400162c4308bc99b4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • stealer.rar
    .rar 18.3MB
  • stealer/build/test/Analysis-00.toc
    52KB
  • stealer/build/test/EXE-00.toc
    6KB
  • stealer/build/test/PKG-00.toc
    4KB
  • stealer/build/test/PYZ-00.pyz
    1.4MB
  • stealer/build/test/PYZ-00.toc
    21KB
  • stealer/build/test/base_library.zip
    .zip 1.3MB
  • _collections_abc.pyc
    46KB
  • _weakrefset.pyc
    11KB
  • abc.pyc
    7KB
  • codecs.pyc
    39KB
  • collections/__init__.pyc
    72KB
  • copyreg.pyc
    7KB
  • encodings/__init__.pyc
    6KB
  • encodings/aliases.pyc
    12KB
  • encodings/ascii.pyc
    2KB
  • encodings/base64_codec.pyc
    3KB
  • encodings/big5.pyc
    2KB
  • encodings/big5hkscs.pyc
    2KB
  • encodings/bz2_codec.pyc
    4KB
  • encodings/charmap.pyc
    3KB
  • encodings/cp037.pyc
    3KB
  • encodings/cp1006.pyc
    3KB
  • encodings/cp1026.pyc
    3KB
  • encodings/cp1125.pyc
    13KB
  • encodings/cp1140.pyc
    3KB
  • encodings/cp1250.pyc
    3KB
  • encodings/cp1251.pyc
    3KB
  • encodings/cp1252.pyc
    3KB
  • encodings/cp1253.pyc
    3KB
  • encodings/cp1254.pyc
    3KB
  • encodings/cp1255.pyc
    3KB
  • encodings/cp1256.pyc
    3KB
  • encodings/cp1257.pyc
    3KB
  • encodings/cp1258.pyc
    3KB
  • encodings/cp273.pyc
    3KB
  • encodings/cp424.pyc
    3KB
  • encodings/cp437.pyc
    13KB
  • encodings/cp500.pyc
    3KB
  • encodings/cp720.pyc
    3KB
  • encodings/cp737.pyc
    13KB
  • encodings/cp775.pyc
    13KB
  • encodings/cp850.pyc
    12KB
  • encodings/cp852.pyc
    13KB
  • encodings/cp855.pyc
    13KB
  • encodings/cp856.pyc
    3KB
  • encodings/cp857.pyc
    12KB
  • encodings/cp858.pyc
    12KB
  • encodings/cp860.pyc
    13KB
  • encodings/cp861.pyc
    13KB
  • encodings/cp862.pyc
    13KB
  • encodings/cp863.pyc
    13KB
  • encodings/cp864.pyc
    13KB
  • encodings/cp865.pyc
    13KB
  • encodings/cp866.pyc
    13KB
  • encodings/cp869.pyc
    13KB
  • encodings/cp874.pyc
    3KB
  • encodings/cp875.pyc
    3KB
  • encodings/cp932.pyc
    2KB
  • encodings/cp949.pyc
    2KB
  • encodings/cp950.pyc
    2KB
  • encodings/euc_jis_2004.pyc
    2KB
  • encodings/euc_jisx0213.pyc
    2KB
  • encodings/euc_jp.pyc
    2KB
  • encodings/euc_kr.pyc
    2KB
  • encodings/gb18030.pyc
    2KB
  • encodings/gb2312.pyc
    2KB
  • encodings/gbk.pyc
    2KB
  • encodings/hex_codec.pyc
    3KB
  • encodings/hp_roman8.pyc
    3KB
  • encodings/hz.pyc
    2KB
  • encodings/idna.pyc
    14KB
  • encodings/iso2022_jp.pyc
    2KB
  • encodings/iso2022_jp_1.pyc
    2KB
  • encodings/iso2022_jp_2.pyc
    2KB
  • encodings/iso2022_jp_2004.pyc
    2KB
  • encodings/iso2022_jp_3.pyc
    2KB
  • encodings/iso2022_jp_ext.pyc
    2KB
  • encodings/iso2022_kr.pyc
    2KB
  • encodings/iso8859_1.pyc
    3KB
  • encodings/iso8859_10.pyc
    3KB
  • encodings/iso8859_11.pyc
    3KB
  • encodings/iso8859_13.pyc
    3KB
  • encodings/iso8859_14.pyc
    3KB
  • encodings/iso8859_15.pyc
    3KB
  • encodings/iso8859_16.pyc
    3KB
  • encodings/iso8859_2.pyc
    3KB
  • encodings/iso8859_3.pyc
    3KB
  • encodings/iso8859_4.pyc
    3KB
  • encodings/iso8859_5.pyc
    3KB
  • encodings/iso8859_6.pyc
    3KB
  • encodings/iso8859_7.pyc
    3KB
  • encodings/iso8859_8.pyc
    3KB
  • encodings/iso8859_9.pyc
    3KB
  • encodings/johab.pyc
    2KB
  • encodings/koi8_r.pyc
    3KB
  • encodings/koi8_t.pyc
    3KB
  • encodings/koi8_u.pyc
    3KB
  • encodings/kz1048.pyc
    3KB
  • encodings/latin_1.pyc
    2KB
  • encodings/mac_arabic.pyc
    13KB
  • encodings/mac_croatian.pyc
    3KB
  • encodings/mac_cyrillic.pyc
    3KB
  • encodings/mac_farsi.pyc
    3KB
  • encodings/mac_greek.pyc
    3KB
  • encodings/mac_iceland.pyc
    3KB
  • encodings/mac_latin2.pyc
    3KB
  • encodings/mac_roman.pyc
    3KB
  • encodings/mac_romanian.pyc
    3KB
  • encodings/mac_turkish.pyc
    3KB
  • encodings/mbcs.pyc
    2KB
  • encodings/oem.pyc
    1KB
  • encodings/palmos.pyc
    3KB
  • encodings/ptcp154.pyc
    3KB
  • encodings/punycode.pyc
    9KB
  • encodings/quopri_codec.pyc
    3KB
  • encodings/raw_unicode_escape.pyc
    2KB
  • encodings/rot_13.pyc
    4KB
  • encodings/shift_jis.pyc
    2KB
  • encodings/shift_jis_2004.pyc
    2KB
  • encodings/shift_jisx0213.pyc
    2KB
  • encodings/tis_620.pyc
    3KB
  • encodings/undefined.pyc
    2KB
  • encodings/unicode_escape.pyc
    2KB
  • encodings/utf_16.pyc
    7KB
  • encodings/utf_16_be.pyc
    2KB
  • encodings/utf_16_le.pyc
    2KB
  • encodings/utf_32.pyc
    7KB
  • encodings/utf_32_be.pyc
    2KB
  • encodings/utf_32_le.pyc
    2KB
  • encodings/utf_7.pyc
    2KB
  • encodings/utf_8.pyc
    2KB
  • encodings/utf_8_sig.pyc
    6KB
  • encodings/uu_codec.pyc
    4KB
  • encodings/zlib_codec.pyc
    4KB
  • enum.pyc
    84KB
  • functools.pyc
    41KB
  • genericpath.pyc
    7KB
  • heapq.pyc
    17KB
  • io.pyc
    4KB
  • keyword.pyc
    1021B
  • linecache.pyc
    8KB
  • locale.pyc
    64KB
  • ntpath.pyc
    26KB
  • operator.pyc
    17KB
  • os.pyc
    44KB
  • posixpath.pyc
    17KB
  • re/__init__.pyc
    18KB
  • re/_casefix.pyc
    1KB
  • re/_compiler.pyc
    26KB
  • re/_constants.pyc
    5KB
  • re/_parser.pyc
    42KB
  • reprlib.pyc
    10KB
  • sre_compile.pyc
    607B
  • sre_constants.pyc
    610B
  • sre_parse.pyc
    603B
  • stat.pyc
    5KB
  • traceback.pyc
    70KB
  • types.pyc
    15KB
  • warnings.pyc
    28KB
  • weakref.pyc
    31KB
  • stealer/build/test/localpycs/pyimod01_archive.pyc
    4KB
  • stealer/build/test/localpycs/pyimod02_importers.pyc
    31KB
  • stealer/build/test/localpycs/pyimod03_ctypes.pyc
    6KB
  • stealer/build/test/localpycs/pyimod04_pywin32.pyc
    1KB
  • stealer/build/test/localpycs/struct.pyc
    305B
  • stealer/build/test/test.pkg
    7.7MB
  • stealer/build/test/warn-test.txt
    2KB
  • stealer/build/test/xref-test.html
    .html 277KB
  • stealer/dist/test.exe
    .exe 8.0MB
  • test.pyc
    11KB
  • stealer/test.py
    7KB
  • stealer/test.spec
    694B

stealer.rar

  • SHA256 b32dfdcf3ab0b0fb1ec26190dea85000091f902ce2b601400162c4308bc99b4d
  • MD5 SHA1 SHA512 SSDEEP TLSH