pysilon | b1eaa9119e989f79c0f8335718647ff2053c42cc7338eb8bacd0424f243a449c

Sharing

Copy URL

Twitter E-mail

General

Target

AugustInvoices.exe
Size

74.8MB
Sample

240826-q7t9qaybrj
MD5

33407f620fae68ed65173e36be49527e
SHA1

74112fe77ff6fdbf914ad6d80f307cc87fa39664
SHA256

b1eaa9119e989f79c0f8335718647ff2053c42cc7338eb8bacd0424f243a449c
SHA512

da76e9ff85227452438660dad8c206854c940b72199d7e15a8b9495bc1c3d25e84356b55c01303d4caf10168f0dfe5525a77b11cc919c0ae9a43a70168226bf5
SSDEEP

1572864:IvhQ6lALWq7vDSk8IpG7V+VPhqugVE7WT2lPnIq6oiY4MHHLeqPNLtDmN07CDqax:Ivh1yXPSkB05awDHT25nIq6rMHVLtu+K

Score

10^/10

Malware Config

Targets

- Target
  
  AugustInvoices.exe
- Size
  
  74.8MB
- MD5
  
  33407f620fae68ed65173e36be49527e
- SHA1
  
  74112fe77ff6fdbf914ad6d80f307cc87fa39664
- SHA256
  
  b1eaa9119e989f79c0f8335718647ff2053c42cc7338eb8bacd0424f243a449c
- SHA512
  
  da76e9ff85227452438660dad8c206854c940b72199d7e15a8b9495bc1c3d25e84356b55c01303d4caf10168f0dfe5525a77b11cc919c0ae9a43a70168226bf5
- SSDEEP
  
  1572864:IvhQ6lALWq7vDSk8IpG7V+VPhqugVE7WT2lPnIq6oiY4MHHLeqPNLtDmN07CDqax:Ivh1yXPSkB05awDHT25nIq6rMHVLtu+K
Score

9^/10

upx evasion execution persistence
- Enumerates VirtualBox DLL files
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2
- Target
  
  discord_token_grabber.pyc
- Size
  
  8KB
- MD5
  
  a909cac2d30c76b23233810a673fae10
- SHA1
  
  2b466a84ff150992111c720af570970a0281daaf
- SHA256
  
  a3f1ccfe919e700b88b56c0d17673f4a175cccf29766b5fcea12692004b8a86f
- SHA512
  
  e20dec67c014c7f0dff2a3ad28a17dae3e9c77469594b6f1a9f7056f585bbf56e21c187a9292bfa17f10055046fbbe5291b2603adfe597cd83ff927369148eb4
- SSDEEP
  
  192:ESB7osP1MJaugQXaafNqaclHJLOqFJFDWboRjJ5Jv:TP1iavQTqacyqVDbFPv
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  get_cookies.pyc
- Size
  
  5KB
- MD5
  
  2754e3152f668e31fccca7b6f275716b
- SHA1
  
  e9ed74d679a96372c4457e72bc6639a4d96a2378
- SHA256
  
  f7e8a57b54489b5b3de66a1d21534ced3d2a2fb1ce8d03c69d4672e62aa00dca
- SHA512
  
  a8331f1c179ed97e6f3821cd41953a5ef8a0b63b6d39022cd3f7980494eff8f00b4367301509014e83c410ed4a6db8e4441f8f3547b682aca250bc4fa29f0f47
- SSDEEP
  
  96:STUBj1Mvk80VDdybA6HUicwKD7dxWeBJKZLpMglcTK94:wsSl0fQfUpwKfhijMgGW94
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  
  misc.pyc
- Size
  
  2KB
- MD5
  
  bcb404423ac51f798753e8d11e401071
- SHA1
  
  9080018dae3aa157e3a97904c86af06d4a0a6873
- SHA256
  
  572b18ccb1838f23714fae1c8cbb399a08796b1eb846960d5463d40ee784fe5a
- SHA512
  
  25a2997cff19308956086ae4e464f5039e53149043f094f2a65dae4dfa78b6410650a3c4d1514511f23c6bf77228772fa7b8a3cf5119e4ed46edb65ac40ff800
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  
  passwords_grabber.pyc
- Size
  
  4KB
- MD5
  
  8b9cbd29c3dfec519a4313b1b7a0069b
- SHA1
  
  5efb073593bc8908a7514dad78673c9d65344a6f
- SHA256
  
  589d438226abfec8f71ab7724c68011303f82febb6786fd0c57571b0769764f3
- SHA512
  
  c0099bcf2d23dd405b2e02e1fd1b946195015eabb1cbd2ce4896f1ab7e5bbc1fbe6600fa529087b5dc295c13219fb6bc1a6ac97efa4c0fc74901f70278c09bfd
- SSDEEP
  
  96:2APDnTWeYwDTgWxiX79GzTOjYUyWkUUNPIslLClDWJpR6Yn:TzCUDxiLATmeEUNP/lL3JpsYn
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  
  source_prepared.pyc
- Size
  
  65KB
- MD5
  
  7b2f91e8321387e4e65387d4f8aea236
- SHA1
  
  b60ad177dbe3560b5a7fc3ef01b1486c306af845
- SHA256
  
  081f923d1831b2ded898f97a629767cf5c1b3c1b7107c35efc610b7e71b3c99c
- SHA512
  
  74270400de01d3b6bcd18bddd5e826ee7253d54efe05fd1a4826a955982c407d4b6ebbf1ed24130653bd6166fe9191b44b0e72ce24c760044c9d8a6f247805cc
- SSDEEP
  
  1536:20EgVg19tVO8Bj1uYCFjUpFZCdBLoNFmmnf:4g25VnBkFwpFgLoR
Score

3^/10

discovery
behavioral11 behavioral12