General

  • Target

    Tempest.exe

  • Size

    75.9MB

  • MD5

    ebfaa1d9949c75252082ef900171cc88

  • SHA1

    52335d715d19512ea5dd7cf3d0cf08275e8c71ec

  • SHA256

    39c4ef7fdd4f1fe9e538ebe85d86cc5b21008226d6d61979bc251ceae80fd87a

  • SHA512

    06b2b71c4d34e27d301fae208d12471a92f0689955630ca8371d0838505e654df7ac8d80b6fb045e5c4bd3b44c72b83c1617d43f1e63cf47b7fb567a0cf8afa0

  • SSDEEP

    1572864:T2vHcRlqGSk8IpG7V+VPhqWdfWE7wFltFziYweyJulZUdgAdW4ppuBa/Z9UN/:ivHcRxSkB05awqfG3CpukdRG89U

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Tempest.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc