General

  • Target

    th.exe

  • Size

    80.2MB

  • MD5

    ef8ef3a672b5c946689f948bd481b28a

  • SHA1

    c16e4048136d41f58a866689456269b222331628

  • SHA256

    1f052d61d35224ec7ed0fb67192bfb8166d7612a2b844a8d63b68f93a53072e5

  • SHA512

    ce7bde81e2d77a4eebe5cac6d0937e334958cbfbec925f0299eefda5cce09f641bd110ecb94e3471b0b66069efe4b114326fe0e636e49dcb32fe239b8fc8e055

  • SSDEEP

    1572864:dvxZQgl/5Sk8IpG7V+VPhqFOE7jblgwviYgj+h58sMwEWPnbT3RR:dvxZxrSkB05awF3ewR5Aa

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • th.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc