General

  • Target

    RosConsole.rar

  • Size

    84.9MB

  • MD5

    d04f32f782b9df8dd204ff10dd66ddc2

  • SHA1

    35dfe2a7c42f7741ee6b3d661e71dd66e8a5c785

  • SHA256

    5c986cf8f61b6d1d613c79d16d58c75f9da884ada081c93448bc061f7c886725

  • SHA512

    38c39abb5b56ff5e4d6d0d7970b47166a8748fe2d2db33832993ed23b5ca7aeddcfa66a7c60c8c12c6dfb36b2e0615db668898f49df5d2cc662a5affdddb0c8a

  • SSDEEP

    1572864:6KpsoXBs+5rXfqTgnmYTLMeX3pP+7SPXtxeUoT1d4CubdHy4SlN:H952eMo5G78tk/1d4NdHvuN

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • RosConsole.rar
    .rar

    Password: ilovecodeing

  • RosConsole/RosConsole.exe
    .exe windows:5 windows x64 arch:x64

    Password: ilovecodeing

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • main.pyc
  • RosConsole/data/Roshelp.exe
    .exe windows:6 windows x64 arch:x64

    Password: ilovecodeing

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc