General

  • Target

    message(234).pdf.exe

  • Size

    80.4MB

  • MD5

    18a813bfbeb194b212820ab658e9b899

  • SHA1

    27dde70c5b4037cc3c71dbfc8417ad7dcd79c484

  • SHA256

    e5eedba40f4442ec6eea8d97d9535a05c8afc7c6ff926423bfe7825e7bc72552

  • SHA512

    5997d830fb5892a212d5dd3126f8eb03c64359ed2c8993a0375dff9cdd3d391e72f937f9e1afb30aa48aee05507f33137d34d2864e6a79e4b2db3b96afec7580

  • SSDEEP

    1572864:8jQNuiEjtgWGpiQtWWc2Mp6SbBirAH8+1osuTCSxOB6xMbWCVt79WHzrU:8jX3yWGpi0lc2gnbBS6xjKcBaORVtJWU

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • message(234).pdf.exe
    .exe windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc