General

  • Target

    RAT builder.exe

  • Size

    11.4MB

  • MD5

    e28faf7dec142fdf036ce73327887131

  • SHA1

    5a3b80939e89d675b88a3f122888fe38e0b75c53

  • SHA256

    836afad6c63f8b8d5f29165e8caa672c0616ebf868ec32bf32e5d9a934cdfc09

  • SHA512

    7f1852ae1b95f1000b872592c85322466c8f480e78f3f4f21703279fbd255b219494cf9e94190843337648a0ce223f7df38ee7b311f5cf0905d8120d366f73e1

  • SSDEEP

    196608:YaGgh+CbY59QRwuLEurErvI9pWj5+gB3ZdahF0wu1APQ4IZROkVtQvN+j0WH07:phXbY5tlurEUWjAgBeKvNV60j9Y

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RAT builder.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc