General

  • Target

    Rifi_Loader.exe

  • Size

    80.5MB

  • MD5

    79d160860a8f2cdd113fbc03495c8462

  • SHA1

    c237d2d9e65411b8c0bac39fa37dbac4dad21051

  • SHA256

    a318c71398f37947c412373711d66a5441f07da7b9079fd54fff6ed6b8bc717a

  • SHA512

    0cd0e27d93c3c137fb30c8efa8e68baf654d49a44615c727e21e22b1f988cfd235f5cce0b3c316659137c739d519d5d0ea31c3c94d8e3199c26cbf89d04592d6

  • SSDEEP

    1572864:OvlQ3j0+JSk8IpG7V+VPhqcPE70jC0WB/4PcPJTWY9bDDP1qA:Ovl+bJSkB05awcVujB/YcPZp9bvP1q

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rifi_Loader.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc