General

  • Target

    Tundra.exe

  • Size

    76.6MB

  • MD5

    c48d14c699309f86cf661051c31c0425

  • SHA1

    4da44291cf2de21a6da1b098b58d33970faeeb86

  • SHA256

    ec260c1375374641446811e46f0547ba505370811a4e7f03faff0339b13d7497

  • SHA512

    f2853535dece867f4d4d45c03ae9d9f705b3f9d93894b508a6034a7baf2b8caa3d09120f024e41c3bf143faaab7487d7bffefa59e3295b8d4c75ecc7468a598a

  • SSDEEP

    1572864:Lvbzj9zWSk8IpG7V+VPhqb+TTE7UjxA7fEVWcRIsjHEYuMbkyyI6MWhOau6oUq4f:LvbzpWSkB05awb+TxtpEcRDkYlyvMgpd

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Tundra.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc