General

  • Target

    Dema Bootstrapper.exe

  • Size

    76.4MB

  • MD5

    6ba352942d85fa603be93afd073107d3

  • SHA1

    1049de118dc35932d71b73380d6b5c7d96754444

  • SHA256

    e7ca1f5f5c494a6a6c77ab874f3d154dbcec1315f4a65f85ae066dd6a1570428

  • SHA512

    7dae153905a5e6f877bacd67630e824c7528ecb40b63cb1376906dc8fb9c1b95fd5a668f900920d2b09df10cd1957e399a2669a87686070fe5a3668b8251d958

  • SSDEEP

    1572864:5viEZjFcSk8IpG7V+VPhqYdfME7mjx/PRQvbXhQaE/zspC0WVdj8VjTb8g:5vZZ2SkB05awcfQt/2bXhQL0c5X

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Dema Bootstrapper.exe
    .exe windows:5 windows x64 arch:x64

    5bc16b5845145eb0edb88983820691b1


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • protections.pyc
  • source_prepared.pyc