General

  • Target

    dahood.exe

  • Size

    78.3MB

  • MD5

    204bc28cf37693ef5034457eac591884

  • SHA1

    c470feac4815387443b47323d569105918f8498a

  • SHA256

    05fa7f3adb89f7b6f7a6f6843f917484ef2f3d2eb398e2820676ee23b207841e

  • SHA512

    fdbaab7f802ee86a750aa048ced7799213b29ded710b26205e2fd82331b18987b841f10ff611db979d019f92bc2e89431e8637acada2c6d2f3ed852ebab63c2c

  • SSDEEP

    1572864:jvHcRl+h7vXSk8IpG7V+VPhqWdfME7ZlH/iYweyJulZUdgu0WVb2Zl+hL:jvHcRMhTSkB05awqfvdQpuK0cyuhL

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dahood.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc