Static

static

10

Resubmissions

27/07/2024, 12:33

240727-prc5tsshlc 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    release-1 (2).rar

  • Size

    98.6MB

  • MD5

    2b647e9ebb5f00718d9b964633cfbd30

  • SHA1

    5aff0d2a3aad7718c0052df1df708bb61c2e518f

  • SHA256

    bc96e346273cebe31bc2a11b26f67f27eb08b45f40ab68361069676b1e71acea

  • SHA512

    d59ea0bd9271876946fb92739d5f4dc5f5e8f57853165bc894150918a21dd755ec1b171b8067100f9da9c05d91e9a5c91119f1077ae559c0108c019fd498b62e

  • SSDEEP

    1572864:0ING83990r9oK9JJaZlplaSIX2UEqUV/PEyg+9AKRTynNah/T2Ps8:0IN799w9oki5HUzUVPjgRKL2D

Score
10/10
pyinstallerthemidapysilonempyrean

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
    empyrean
  • Pysilon family
    pysilon
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Detects Pyinstaller 2 IoCs
    pyinstaller
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • release-1 (2).rar
    .rar

    Password: 123

  • release/main/cheat.exe
    .exe windows:6 windows x64 arch:x64

    Password: 123

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc
  • release/main/loader.exe
    .exe windows:5 windows x64 arch:x64

    Password: 123

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • release/map/map.exe
    .exe windows:6 windows x64 arch:x64

    Password: 123


    Headers

    Sections

  • release/readme.txt