Overview

overview

8

Static

static

8

New folder...en.txt

windows10-2004-x64

8

New folder...en.txt

windows11-21h2-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    New folder (2).rar

  • Size

    2.0MB

  • MD5

    232708f65fae7e1ff1116eb48a9cfc2a

  • SHA1

    2894fb59cb5d7931344a84ce6054137226c27ff6

  • SHA256

    4623a4914846ef4133c66df09f29a1d6d7e376fa25f135e0be0143793c341e65

  • SHA512

    95ff5b3f96a44ef9eeb2b34c19c2d42763b61dc1e2afeb8548c8d1ed1aacaef469b07d9d2d5111b7f8973dcebdc217df9ef87e4f0a37c72ce0bf409582fac03d

  • SSDEEP

    49152:UF98ql1XSzKzKpyWkppV3wBR7+nAbnAaoZwlG:s5l1XY3pyVd37enRoZwlG

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • New folder (2).rar
    .rar .zip polyglot

    Password: betternotHICKMEBUDDY!!!!!!!

  • New folder (2)/PySilon-malware-3.7.5.zip
    .zip

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/.github/ISSUE_TEMPLATE/bug_report.md
  • PySilon-malware-3.7.5/.github/ISSUE_TEMPLATE/feature_request.md
  • PySilon-malware-3.7.5/.github/ISSUE_TEMPLATE/if-you-are-unsure-pick-bug-report.md
  • PySilon-malware-3.7.5/.gitignore
  • PySilon-malware-3.7.5/CODE_OF_CONDUCT.md
  • PySilon-malware-3.7.5/CONTRIBUTING.md
  • PySilon-malware-3.7.5/LICENSE
  • PySilon-malware-3.7.5/PySilon-linux.sh
    .sh linux
  • PySilon-malware-3.7.5/PySilon.bat
  • PySilon-malware-3.7.5/README.md
  • PySilon-malware-3.7.5/builder.py
  • PySilon-malware-3.7.5/compiler.py
  • PySilon-malware-3.7.5/configuration.ini
  • PySilon-malware-3.7.5/requirements.txt
  • PySilon-malware-3.7.5/resources/crypto_clipper.json
  • PySilon-malware-3.7.5/resources/custom_imports.ini
  • PySilon-malware-3.7.5/resources/discord_token_grabber.py
  • PySilon-malware-3.7.5/resources/get_cookies.py
  • PySilon-malware-3.7.5/resources/icons/author_icon.jpg
  • PySilon-malware-3.7.5/resources/icons/discord/messagebox-exclamation.png
    .png

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/resources/icons/discord/messagebox-info.png
    .png

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/resources/icons/discord/messagebox-question.png
    .png

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/resources/icons/discord/messagebox-stop.png
    .png

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/resources/icons/embed_icon.png
    .png

    Password: betternotHICKMEBUDDY!!!!!!!

  • PySilon-malware-3.7.5/resources/icons/icon.ico
  • PySilon-malware-3.7.5/resources/icons/jumpscare.mp4
  • PySilon-malware-3.7.5/resources/libopus-0.x64.dll
    .dll windows:6 windows x64 arch:x64

    Password: betternotHICKMEBUDDY!!!!!!!

    a16037b80461374dbaac126287be81b9


    Headers

    Imports

    Exports

    Sections

  • PySilon-malware-3.7.5/resources/misc.py
  • PySilon-malware-3.7.5/resources/passwords_grabber.py
  • PySilon-malware-3.7.5/resources/protections.py
  • PySilon-malware-3.7.5/resources/source_code/audio_control.py
  • PySilon-malware-3.7.5/resources/source_code/block_input.py
  • PySilon-malware-3.7.5/resources/source_code/bsod.py
  • PySilon-malware-3.7.5/resources/source_code/crypto_clipper.py
    .py .js
  • PySilon-malware-3.7.5/resources/source_code/file_downloading.py
  • PySilon-malware-3.7.5/resources/source_code/file_encryption.py
  • PySilon-malware-3.7.5/resources/source_code/file_explorer.py
  • PySilon-malware-3.7.5/resources/source_code/file_removal.py
  • PySilon-malware-3.7.5/resources/source_code/file_uploading.py
  • PySilon-malware-3.7.5/resources/source_code/fork_bomb.py
  • PySilon-malware-3.7.5/resources/source_code/grabber.py
  • PySilon-malware-3.7.5/resources/source_code/jumpscare.py
  • PySilon-malware-3.7.5/resources/source_code/keylogger.py
  • PySilon-malware-3.7.5/resources/source_code/keystrokes.py
  • PySilon-malware-3.7.5/resources/source_code/live_microphone.py
  • PySilon-malware-3.7.5/resources/source_code/messager.py
  • PySilon-malware-3.7.5/resources/source_code/microphone_recording.py
  • PySilon-malware-3.7.5/resources/source_code/monitor_control.py
  • PySilon-malware-3.7.5/resources/source_code/process.py
  • PySilon-malware-3.7.5/resources/source_code/registry.py
  • PySilon-malware-3.7.5/resources/source_code/reverse_shell.py
  • PySilon-malware-3.7.5/resources/source_code/screen_manipulation.py
  • PySilon-malware-3.7.5/resources/source_code/screenrec.py
  • PySilon-malware-3.7.5/resources/source_code/screenshot.py
  • PySilon-malware-3.7.5/resources/source_code/texttospeech.py
  • PySilon-malware-3.7.5/resources/source_code/webcam.py
  • PySilon-malware-3.7.5/resources/source_code/website_blocker.py
  • PySilon-malware-3.7.5/resources/uac_bypass.py
  • PySilon-malware-3.7.5/resources/upx.exe
    .exe windows:4 windows x64 arch:x64

    Password: betternotHICKMEBUDDY!!!!!!!


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • PySilon-malware-3.7.5/source.py
    .py .ps1
  • PySilon-malware-3.7.5/tools/drawling_studio/DrawlingStudio.bat
  • PySilon-malware-3.7.5/tools/drawling_studio/assets/create_new.png
    .png
  • PySilon-malware-3.7.5/tools/drawling_studio/assets/icon.ico
  • PySilon-malware-3.7.5/tools/drawling_studio/main.py
  • PySilon-malware-3.7.5/tools/drawling_studio/requirements.txt
  • PySilon-malware-3.7.5/tools/drawling_studio/saves/previews/skull.png
    .png
  • PySilon-malware-3.7.5/tools/drawling_studio/saves/skull.drawdata
  • PySilon-malware-3.7.5/tools/drawling_studio/studio.py
  • PySilon-malware-3.7.5/tools/splitter.py
  • New folder (2)/token.txt