General

  • Target

    GalaxySwapperV2.exe

  • Size

    76.6MB

  • MD5

    3e2bb969f013b55d25a210b24118ee54

  • SHA1

    4ccaa0ff441d86ce31d876d27eb6cb2aa71d97fc

  • SHA256

    ed715b45f2adde782057f31e74084d56c0081518bf06767f0a67199313563b92

  • SHA512

    7667b4e8c0de83cda2a2757cf0ca92324ed7861de5902067547bc873e02bbad6cac57f700e249168ced5041040d139352ab3fc7be6120c0ad4132077f6d0c19f

  • SSDEEP

    1572864:VvHcRlcSk8IpG7V+VPhqYdfME7FFlHFziYweyJulZUdgAdW4zj7ux3a/Z9U:VvHcReSkB05awcfhdCpukdRPy49U

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GalaxySwapperV2.exe
    .exe windows:6 windows x64 arch:x64

    Password: galaxy123

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc