General

  • Target

    message(184).pdf.exe

  • Size

    25.0MB

  • MD5

    f81d793567c65e152f4a752278581bb8

  • SHA1

    b664e302dc99fa03f1f96ee9205ddfb567cef6db

  • SHA256

    4a6cbe569a3835020bbd878c162ba8e3de00e9540a6af22ece4e409d1562941b

  • SHA512

    ec4af5ba0154117cba3dc0bd70449c5d76ddce30ec0f6379694d891ad15c52c621cf761bf094fa9105e4afab24dc7de5b7e3a49462771d85c81ada51744b0a9c

  • SSDEEP

    393216:8IFLh3nJWQDEOuiNs5OshouIkPqw911Zi16ttRL5dGHu8g26YUu16mCQdBgC:88h3EQNuiDwouWw7iQtRLiHuVW5hD

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • message(184).pdf.exe
    .exe windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc