pysilon | 0dce2ca69763c76d4ed13ae2a8a5759d2bcea2cc8f25669771850195ac56787f

General

Target
Image Logger Builder.exe
Size 80.6MB
Sample240203-1nep2aagh3
SHA256 0dce2ca69763c76d4ed13ae2a8a5759d2bcea2cc8f25669771850195ac56787f
MD5 a04ba594a386ea90e25a31915edd38d3
SHA1 164168f3835d3ffda4c59eff7a29644c0f3cadd6
SHA512 5ad82e5bfbc3434d32e3322076ea72c6ec4cbddb791db0b52a85b7576f319dbc7fb772b63a0e9323e53a937982b8df4620fd21ac8c35e85dbd971dced402c3a0
SSDEEP 1572864:9vlQ3j/JSk8IpG7V+VPhqFOE7Y+wjCSRWB/4PcPJGWTZOmWLcUjQE:9vl+lSkB05awFIluSAB/YcPovZc0
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Image Logger Builder.exe
- Size 80.6MB
- SHA256 0dce2ca69763c76d4ed13ae2a8a5759d2bcea2cc8f25669771850195ac56787f
- MD5 a04ba594a386ea90e25a31915edd38d3
- SHA1 164168f3835d3ffda4c59eff7a29644c0f3cadd6
- SHA512 5ad82e5bfbc3434d32e3322076ea72c6ec4cbddb791db0b52a85b7576f319dbc7fb772b63a0e9323e53a937982b8df4620fd21ac8c35e85dbd971dced402c3a0
- SSDEEP 1572864:9vlQ3j/JSk8IpG7V+VPhqFOE7Y+wjCSRWB/4PcPJGWTZOmWLcUjQE:9vl+lSkB05awFIluSAB/YcPovZc0
- MD5 SHA1 SHA512 SSDEEP
Score

9^/10

evasion persistence upx
- Enumerates VirtualBox DLL files
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1
- Target
  discord_token_grabber.pyc
- Size 17KB
- SHA256 74475975b9fc2e15a1432b8e4930b6a8a25dd63511bbc2628ae81483dd569046
- MD5 db40ce247b464d3ac0d15080f22ce442
- SHA1 eb10f081e16c9566f1b487d39eda3fb8fa4b0de5
- SHA512 c614c93d3ad758bfe1155864328626b98900e95e06c504641f0286ee40e4e0e24eb4d83b06af576e7799d517aae8404f5c9acdc64315c594319c29e13a77b81e
- SSDEEP 384:cGllyAavwW9FaOx817PPQviowoYbCj+MoGWTd0Da8:cIlytvN9oOx8JnQ6owoYOyMImDa8
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral2
- Target
  get_cookies.pyc
- Size 10KB
- SHA256 1201adef44d0ba8be86b7d4aa4e8f69f1f8f800522fa574291974a3b40250436
- MD5 ddc40a1cee51500039f5c98ef7b1d3c9
- SHA1 1e65cf0d7acb74e429844d2ee5b2d39369d17750
- SHA512 c9a89f5fe6ef87d7d8ce63a59f87fd5684d91e5dccfda644d84a40d5316b85b9930e90f096f13e811f646da724bc267ac853c15e451a6888083d5ab0572f27db
- SSDEEP 192:TzOCIeivQfUFPLqwOEVOFc1mNe47+S5zEzzzzz1zz+HoowAE:TzOUi4aFEe4KSPIAE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3
- Target
  misc.pyc
- Size 5KB
- SHA256 bdadc8d5f54a135e4cad6dd398023cc5a8053619489b38d4b22e104215572f89
- MD5 fccbf8762a2d6e382b044d73c9969fbc
- SHA1 9530b874a2fb37cef0bdbc13775d64400c6158b4
- SHA512 359b92919a585e4191bceb029e05c9af95816fc023fd5d566d4a5d9fc88b216cace2fe54dacff65decb68d9ad724386467f367a4fadc68b648a44f5b14f84d20
- SSDEEP 96:DSajAihmJG4n3B4SmSSSSlSSSShDwegPbbVxlj0oIHEDS5ejmw01k9Bddpq:eYAfn3ySmSSSSlSSSSeeOPVxx0oIHZeQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral4
- Target
  passwords_grabber.pyc
- Size 8KB
- SHA256 07a93aa41dbdcd8962b2ad1fcbd7c1bf661130c1cf050a5a4ef6821d30893099
- MD5 1ca5633be35a5db415bc83be9852bf0e
- SHA1 710a4da76579449bb0b45eecedd42aea82ba6b35
- SHA512 9ac14821d21d9c7345b6cf51d9e1c31f908590fadca061ed4f5c50ea7cd28c92b169aa7985873876989e7108946090695a4c782d8251f5061d27cea7c2f35ccb
- SSDEEP 192:+CE34EAL/GFf/PoXdLO23NsDmqFUhkxNivLI9dRvL:Y4EAL/AfsFO8NsxuOxNn
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral5
- Target
  source_prepared.pyc
- Size 186KB
- SHA256 a9196365fa7ebf16536ddb93ecd418d30e8446d1a5cc0c837e61fe808da7582d
- MD5 62d570a91d0b993c36eec7438cfa4187
- SHA1 1d5fdbaec4d1c98cab916bb92ac4eba29b093d7a
- SHA512 7f2eb9b88c4e1dca1c58f5252bfe141e3f01c382458518385f9595cb76469e5887a8135c3210bb39b8642015e35572f08daf4cb82999b260fea07f9ffeaa39f9
- SSDEEP 3072:ctL7EhAA9MVdIOonJVqvpuSIVMZJkeBgwcWZM+C8n0:ct/Ehx9OonTquSImZJkeBgwcOhCp
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral6