General

  • Target

    GOBLIN SERVICES.exe

  • Size

    78.7MB

  • MD5

    cb58033d333ce4d39c63978535e3d91e

  • SHA1

    b5740b3fe890a511f7524c88b1f45845ef3333a6

  • SHA256

    2a1a8f4f8a42ed7fb7bcc3dcc4fde0acd6db267784cbc3431852b2882c4c6ae1

  • SHA512

    d17c468837f5de45217e5421049f2a31fd9d67b2b5f5d8e2755ba4de4ad60c15d6b49d4e949cc22403ba939b796bf97f81371ef30a6d3aadc805d001b538ca58

  • SSDEEP

    1572864:M2MbiJR5Q3j88pSk8IpG7V+VPhqHnE7gwjCi9WlsnghowmaOll4WmVSzsWX:MZbC+7SkB05awHMuiMsghfxOll4j8z

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GOBLIN SERVICES.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc