General

  • Target

    atlas v14 modded -- leaked by loorwow.exe

  • Size

    76.8MB

  • MD5

    409ce8c1f3b8571c1b5fc054840488df

  • SHA1

    55eefadba8fd5a708b96e27b60033a1ec4067372

  • SHA256

    c1cfa9c15b906b19f499975f49dcd584138483a7e968c430a0938da40f9b7400

  • SHA512

    db21bcdbba4f4fe3663ff38b36e9d6e2d018dbb9f1d41055d678b376f766b71a9938b7b3692c325c567a17ce8514d337f52cf59cd91428b08f6a81606e713e8c

  • SSDEEP

    1572864:0vHcRlKWah7vXSk8IpG7V+VPhqYdfME7tlHegiYweyJulZUdg+hlrafEGV37U:0vHcRYJhTSkB05awcfLdMpuyhlrAto

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • atlas v14 modded -- leaked by loorwow.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc