General

  • Target

    Eyada - Genshin.exe

  • Size

    26.5MB

  • MD5

    ee5a9db3543d621124e768e0e5db60d2

  • SHA1

    2c43493f163748871c2d141efd6d063830dd1f98

  • SHA256

    1fc4dc449959381784dd2500ea76de0139e40b8aca1d92e6b5d22fb6f927636c

  • SHA512

    9b9fc9f8eb7a8868585ff980c5ccfea79b2b0a2f08a6281494940a5481d060123eb045b41cf8a12778ab8498713a9f4dff66e4a3169b2906abd9f0a3447a3a13

  • SSDEEP

    393216:HUdMbZ0JLHdB3QNlV8VNetLV+A/pWNdW88RUarfgnfXBB1eDBzs2CUTA53Hyp:HUdMbZ0JR5Ql8+V+A/pWTW8k+CBzEfI

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Eyada - Genshin.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc