Resubmissions

04/10/2023, 11:06

231004-m7vzgada54 10

04/10/2023, 11:05

231004-m6s4gsda48 10

General

  • Target

    windowshosts.exe

  • Size

    77.1MB

  • MD5

    e3cc7df023688430bfa25a1bfd30dc6b

  • SHA1

    ec87120fbf307bcf0fceac2c77c221a31b8aa8a2

  • SHA256

    1f3b50a1f9d7d1c29c8cbf57e5a637c84cf7c51eae79e041269e6cb085260df8

  • SHA512

    70d44896d79b8ba69d2abe05f628909f385f81dbd8553817c7f0d8e5b255b2e62a10e85c0d92c478c73e1761eb146304e1d62f4956eb9804a51c02b886d00d39

  • SSDEEP

    1572864:d2MTiQYHJidBSk8IpG7V+VPhqoHEE7lftaHp5tWWlXxTa9k4VTWfaU/BQIYgY:dZTixpQBSkB05awoHQJjl3Ty9VTYaU/j

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windowshosts.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc