Overview

overview

10

Static

static

10

tpm off.exe

windows7-x64

7

tpm off.exe

windows10-2004-x64

9

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    tpm off.exe

  • Size

    76.6MB

  • MD5

    fd451441202e694d4f401d75dd4a1f7e

  • SHA1

    b0d435b91868a5ad671f7b7aee1464d5524d5b88

  • SHA256

    54b545f5276ce01a5c7151e8ba1053264512be315aa88cdf5eab72aef69d02c2

  • SHA512

    442555165ab0f01058655747ed8f104b4af1e24167d588a305fc4e0c960daaf8a2c9fcf25ecf0dffe5286c3ab5e2f53201ff910cc48ac34f08da14ddb024e78d

  • SSDEEP

    1572864:wvpQpjOGSk8IpG7V+VPhqIbE7WZRjRnWWZ/dc7lWlkSWuQZNWl8:wvpqSGSkB05awIxZRdlwYlkSwSi

Score
10/10
pyinstallerpysilon

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
    pysilon
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tpm off.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc