Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Wave+.zip

  • Size

    77.3MB

  • MD5

    7cb3017ba14b7a9d8bf242912bab05b4

  • SHA1

    05894ac870d8946b6b87eb68cc1277a62ce00436

  • SHA256

    97bbe93641f0a577897796c6f797edc145ce7c38885601ea1a12a883ec9d7a9d

  • SHA512

    e4c945d83fa975d4a7e67c2844de1f27b5241ad242da5d8480abb40ff6ab713e9fe3b97bcd4ad706cd73b5e1183df23ae79adfef857c36867cc140ecf795bc0b

  • SSDEEP

    1572864:aF1hitRh2THpRqKKw7+LDS5fHEoneCcRVrhu1g0MoMfApDq/yReu3sD1crvL3Eq2:g1hit6TbqKbSHkkwelcopAhf3U+H3E1

Score
10/10
pyinstallerpysilon

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
    pysilon
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wave+.zip
    .zip

    Password: infected

  • Install-Python.cmd
    .cmd .vbs
  • Wave.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc