Resubmissions

20/06/2024, 00:25

240620-aqz6msyekg 10

16/06/2024, 07:55

240616-jsc9bsvhnc 10

General

  • Target

    lumicoreupdate.exe

  • Size

    6.8MB

  • MD5

    fcf2007dd9efbd8e07e5433b4cf0e752

  • SHA1

    5532d693e44a584ae629eb515a1be7b1610c1214

  • SHA256

    881fb168838021d1fd4f62c99b89e981737b934bb42219a49c99ca6a0f2ebd5f

  • SHA512

    f53eacf3bd330d97438bbaa1f5b733e846878ea121386881542c346449aa8778ae31d67bebb15286fdd640f66de94967e3fd3bd7e6ff00781465a5bbd2f310ef

  • SSDEEP

    98304:dei6W2Xl0mnAvBBBCAj39H4twW2O+E7nsLFpD0p94V8NjVf7/vf2RiD2Evgn8uQN:F51vBBN5YtwWpbtLN7eG2EHuQ/5

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lumicoreupdate.exe
    .exe windows:5 windows x86 arch:x86

    Password: 123123555

    fa2936ff523bbe01bb11c81e10c9ad2d


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc