General

  • Target

    bqlcjm.zip

  • Size

    80.4MB

  • MD5

    6aad91634d3037e78e228ca561d2a41e

  • SHA1

    88f15564300d0d0f275cd36e8af84f76162b57a0

  • SHA256

    4bf509a709fe242815fb225e40dce31cd12810e60531fbf48259b680762e8780

  • SHA512

    bbdbab8d59f2eb639340540533dc67bcf8d47bc77d933b93bd5b28851804c507740070ef721f067dec8cd917e9d974e0060f03b1724bcdcbd8c7b90ca056d0aa

  • SSDEEP

    1572864:KyNZl6aV/R5dsewwGBI/loXtt0o3CymNwjkC451G/FoKKiWj8T0DQ+EA:vNZltBRIewLm9YyCCk4KF0jE06A

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bqlcjm.zip
    .zip
  • Allstar/bootstrapperV1.1.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc