Resubmissions

05/08/2024, 20:11

240805-yyhtbs1blb 10

General

  • Target

    SolaraBootstrapper.exe

  • Size

    30.0MB

  • MD5

    8def6d80db11ec36bdf5f86f6de3316b

  • SHA1

    399fd854999b014a26818e09ba2a0f5a6ce9ff58

  • SHA256

    35662500e31d085d460b306293ac426efa47b97dae45f3778906076913944e31

  • SHA512

    6242f2854f9791af8c24c07f86a7f5816c781e1928e19759fda4e01d67a044b197e3f3215a957ca45a6561f7453cfa256a07f0bcb59534febd5afedc3e8a3230

  • SSDEEP

    786432:Y9Z9OAQD7vD+szcY87WGhySW8MCNrZpC3dC:6vhQD7v/E7WGhySWINrZpq

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SolaraBootstrapper.exe
    .exe windows:6 windows x64 arch:x64

    Password: infectedfile

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc