General

  • Target

    Discord-Boost-Bot-main.zip

  • Size

    22.6MB

  • MD5

    705ddaef5c7e6ecee603ee3f5c81d043

  • SHA1

    3027d98134335bd0aaeb2869d0d5c0b90f5ae535

  • SHA256

    2e99e2a676007e523f42d1bc778b6af3f473a45ef4748ab93215014ca226d7a7

  • SHA512

    1ad0b36fe355e7c1dd5bc6f0cf3a892f8a8ea7562d228581dc66161218d4a96c2269bfc72be93e87bfa8715d5d4958c06ceabba2f89dceca6082e0626755fb3f

  • SSDEEP

    393216:SYTTbyaQBLS8YT7pL/tWqAf+BnFPkjom8uaCyiJ0EEfxmIyaIQblvV:S8iaNTlFVAfgnFPyom8uvyrfxVyIlvV

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord-Boost-Bot-main.zip
    .zip
  • Discord-Boost-Bot-main/CONFIG~1.JSO
  • Discord-Boost-Bot-main/FINGER~1.JSO
  • Discord-Boost-Bot-main/README.md
  • Discord-Boost-Bot-main/README.txt
  • Discord-Boost-Bot-main/input/run_script.exe
    .exe windows:6 windows x64 arch:x64

    f0486e7e054aa57188c99b0f71783b75


    Headers

    Imports

    Exports

    Sections

  • Discord-Boost-Bot-main/main.py
  • Discord-Boost-Bot-main/start.bat
    .exe windows:5 windows x86 arch:x86

    9222d372923baed7aa9dfa28449a94ea


    Headers

    Imports

    Sections

  • q����(.pyc