General

  • Target

    celestial.exe

  • Size

    71.7MB

  • MD5

    2303e486542f4d635a0c62c61f2baff0

  • SHA1

    9a6639b3f7731ea76ec4587137f4c93f2129e7d2

  • SHA256

    b45e481298e9824ca4184a0f653b27b3fc8aea5dc3bd157e06b14587bc3049f9

  • SHA512

    733e60a895a13f2bd2405365fc1408c9b16df8ed5e768e75c2228c272d71fb160ab1bade093f595766078821126108e88ba445b8282f8f82934c7954a19fdf80

  • SSDEEP

    1572864:T2MQqQxHv/FSk8IpG7V+VPhqGDE7lBaaUHUzvW8J7TwGb94V9sWpPQZKiAs2:TZQq6P/FSkB05awGTaU0SqEGCfsE4pAP

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • celestial.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc