PySilon-malware-main.zip
- SHA256 b01ee9e4b7e57dc0d9a0415723cbc1e7df84c90b352d9b2a716e222360961de8
Overview
overview
8Static
static
8PySilon-ma...nux.sh
ubuntu-18.04-amd64
1PySilon-ma...nux.sh
debian-9-armhf
1PySilon-ma...nux.sh
debian-9-mips
1PySilon-ma...nux.sh
debian-9-mipsel
1PySilon-ma...on.bat
windows7-x64
1PySilon-ma...on.bat
windows10-2004-x64
1PySilon-ma...der.py
windows7-x64
3PySilon-ma...der.py
windows10-2004-x64
3PySilon-ma...ler.py
windows7-x64
3PySilon-ma...ler.py
windows10-2004-x64
3PySilon-ma...ber.py
windows7-x64
3PySilon-ma...ber.py
windows10-2004-x64
3PySilon-ma...ies.py
windows7-x64
3PySilon-ma...ies.py
windows10-2004-x64
3PySilon-ma...64.dll
windows7-x64
1PySilon-ma...64.dll
windows10-2004-x64
1PySilon-ma...isc.py
windows7-x64
3PySilon-ma...isc.py
windows10-2004-x64
3PySilon-ma...ber.py
windows7-x64
3PySilon-ma...ber.py
windows10-2004-x64
3PySilon-ma...ons.py
windows7-x64
3PySilon-ma...ons.py
windows10-2004-x64
3PySilon-ma...rol.py
windows7-x64
3PySilon-ma...rol.py
windows10-2004-x64
3PySilon-ma...put.py
windows7-x64
3PySilon-ma...put.py
windows10-2004-x64
3PySilon-ma...sod.py
windows7-x64
3PySilon-ma...sod.py
windows10-2004-x64
3PySilon-ma...per.py
windows7-x64
3PySilon-ma...per.py
windows10-2004-x64
3PySilon-ma...ing.py
windows7-x64
3PySilon-ma...ing.py
windows10-2004-x64
3Behavioral task
behavioral1
Sample
PySilon-malware-main/PySilon-linux.sh
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
PySilon-malware-main/PySilon-linux.sh
Resource
debian9-armhf-20240611-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
PySilon-malware-main/PySilon-linux.sh
Resource
debian9-mipsbe-20240611-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
PySilon-malware-main/PySilon-linux.sh
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
PySilon-malware-main/PySilon.bat
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
PySilon-malware-main/PySilon.bat
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
PySilon-malware-main/builder.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral8
Sample
PySilon-malware-main/builder.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
PySilon-malware-main/compiler.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral10
Sample
PySilon-malware-main/compiler.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
PySilon-malware-main/resources/discord_token_grabber.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral12
Sample
PySilon-malware-main/resources/discord_token_grabber.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
PySilon-malware-main/resources/get_cookies.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral14
Sample
PySilon-malware-main/resources/get_cookies.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
PySilon-malware-main/resources/libopus-0.x64.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
PySilon-malware-main/resources/libopus-0.x64.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
PySilon-malware-main/resources/misc.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral18
Sample
PySilon-malware-main/resources/misc.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
PySilon-malware-main/resources/passwords_grabber.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral20
Sample
PySilon-malware-main/resources/passwords_grabber.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
PySilon-malware-main/resources/protections.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral22
Sample
PySilon-malware-main/resources/protections.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
PySilon-malware-main/resources/source_code/audio_control.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral24
Sample
PySilon-malware-main/resources/source_code/audio_control.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
PySilon-malware-main/resources/source_code/block_input.py
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral26
Sample
PySilon-malware-main/resources/source_code/block_input.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
PySilon-malware-main/resources/source_code/bsod.py
Resource
win7-20240729-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral28
Sample
PySilon-malware-main/resources/source_code/bsod.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral29
Sample
PySilon-malware-main/resources/source_code/crypto_clipper.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral30
Sample
PySilon-malware-main/resources/source_code/crypto_clipper.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
PySilon-malware-main/resources/source_code/file_downloading.py
Resource
win7-20240903-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral32
Sample
PySilon-malware-main/resources/source_code/file_downloading.py
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target PySilon-malware-main.zip
- Size 2.0MB
- Sample240905-pg217s1flb
- SHA256 b01ee9e4b7e57dc0d9a0415723cbc1e7df84c90b352d9b2a716e222360961de8
- MD5 3bd17906b7b10befd6290b1f09f78b0f
- SHA1 e99d2bd8818d59131e912ba0cbf1bfc8777a7f57
- SHA512 01c594e4558cfe607ecde5666467d44992c098c134aa073b8d24a1c29f9a1a21d795cd14d2bec8e16d6fba0be917116b8471318aa268fd3fc9488281107b0e17
- SSDEEP 49152:AFz8ElxXSzKzKpyWkppF3wBx7+nAbnAaoZmlA:yNlxXY3pyV935enRoZmlA
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Patched UPX-packed file 1 IoCs
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource yara_rule static1/unpack002/out.upx patched_upx -
resource yara_rule static1/unpack001/PySilon-malware-main/resources/upx.exe upx - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/PySilon-malware-main/resources/libopus-0.x64.dll unpack001/PySilon-malware-main/resources/upx.exe unpack002/out.upx
File Explorer
-
PySilon-malware-main.zip.zip 2.0MB
-
PySilon-malware-main/.github/ISSUE_TEMPLATE/bug_report.md663B
-
PySilon-malware-main/.github/ISSUE_TEMPLATE/feature_request.md458B
-
PySilon-malware-main/.github/ISSUE_TEMPLATE/if-you-are-unsure-pick-bug-report.md616B
-
PySilon-malware-main/.gitignore288B
-
PySilon-malware-main/CODE_OF_CONDUCT.md5KB
-
PySilon-malware-main/CONTRIBUTING.md165B
-
PySilon-malware-main/LICENSE1KB
-
PySilon-malware-main/PySilon-linux.sh.sh 5KB
-
PySilon-malware-main/PySilon.bat1KB
-
PySilon-malware-main/README.md10KB
-
PySilon-malware-main/builder.py30KB
-
PySilon-malware-main/compiler.py4KB
-
PySilon-malware-main/configuration.ini867B
-
PySilon-malware-main/requirements.txt359B
-
PySilon-malware-main/resources/crypto_clipper.json155B
-
PySilon-malware-main/resources/custom_imports.ini1KB
-
PySilon-malware-main/resources/discord_token_grabber.py12KB
-
PySilon-malware-main/resources/get_cookies.py5KB
-
PySilon-malware-main/resources/icons/author_icon.jpg62KB
-
PySilon-malware-main/resources/icons/discord/messagebox-exclamation.png.png 576B
-
PySilon-malware-main/resources/icons/discord/messagebox-info.png.png 791B
-
PySilon-malware-main/resources/icons/discord/messagebox-question.png.png 1KB
-
PySilon-malware-main/resources/icons/discord/messagebox-stop.png.png 921B
-
PySilon-malware-main/resources/icons/embed_icon.png.png 54KB
-
PySilon-malware-main/resources/icons/icon.ico186KB
-
PySilon-malware-main/resources/icons/jumpscare.mp4950KB
-
PySilon-malware-main/resources/libopus-0.x64.dll.dll 431KB
-
PySilon-malware-main/resources/misc.py2KB
-
PySilon-malware-main/resources/passwords_grabber.py4KB
-
PySilon-malware-main/resources/protections.py1KB
-
PySilon-malware-main/resources/source_code/audio_control.py3KB
-
PySilon-malware-main/resources/source_code/block_input.py2KB
-
PySilon-malware-main/resources/source_code/bsod.py782B
-
PySilon-malware-main/resources/source_code/crypto_clipper.py.py .js 4KB
-
PySilon-malware-main/resources/source_code/file_downloading.py4KB
-
PySilon-malware-main/resources/source_code/file_encryption.py5KB
-
PySilon-malware-main/resources/source_code/file_explorer.py9KB
-
PySilon-malware-main/resources/source_code/file_removal.py3KB
-
PySilon-malware-main/resources/source_code/file_uploading.py6KB
-
PySilon-malware-main/resources/source_code/fork_bomb.py889B
-
PySilon-malware-main/resources/source_code/grabber.py6KB
-
PySilon-malware-main/resources/source_code/jumpscare.py1KB
-
PySilon-malware-main/resources/source_code/keylogger.py2KB
-
PySilon-malware-main/resources/source_code/keystrokes.py1KB
-
PySilon-malware-main/resources/source_code/live_microphone.py1KB
-
PySilon-malware-main/resources/source_code/messager.py7KB
-
PySilon-malware-main/resources/source_code/microphone_recording.py2KB
-
PySilon-malware-main/resources/source_code/monitor_control.py2KB
-
PySilon-malware-main/resources/source_code/process.py19KB
-
PySilon-malware-main/resources/source_code/registry.py2KB
-
PySilon-malware-main/resources/source_code/reverse_shell.py4KB
-
PySilon-malware-main/resources/source_code/screen_manipulation.py10KB
-
PySilon-malware-main/resources/source_code/screenrec.py1KB
-
PySilon-malware-main/resources/source_code/screenshot.py891B
-
PySilon-malware-main/resources/source_code/texttospeech.py1KB
-
PySilon-malware-main/resources/source_code/webcam.py2KB
-
PySilon-malware-main/resources/source_code/website_blocker.py3KB
-
PySilon-malware-main/resources/uac_bypass.py1KB
-
PySilon-malware-main/resources/upx.exe.exe 550KB
-
out.upx.exe 2.0MB
-
PySilon-malware-main/source.py.py .ps1 34KB
-
PySilon-malware-main/tools/drawling_studio/DrawlingStudio.bat1KB
-
PySilon-malware-main/tools/drawling_studio/assets/create_new.png.png 1KB
-
PySilon-malware-main/tools/drawling_studio/assets/icon.ico186KB
-
PySilon-malware-main/tools/drawling_studio/main.py7KB
-
PySilon-malware-main/tools/drawling_studio/requirements.txt14B
-
PySilon-malware-main/tools/drawling_studio/saves/previews/skull.png.png 2KB
-
PySilon-malware-main/tools/drawling_studio/saves/skull.drawdata27KB
-
PySilon-malware-main/tools/drawling_studio/studio.py10KB
-
PySilon-malware-main/tools/splitter.py817B
PySilon-malware-main/.github/ISSUE_TEMPLATE/bug_report.md
- SHA256 a3fcb9ae407af1d5e184a596ddf5f0dd33496270e4c3e6c6afd2a01bdf04635d
- MD5 96f71782377a9410effbe9494a6d4219
- SHA1 0da1fbb996774912df324a5f3f6b23d9edc8234b
- SHA512 7d2dbd60fe33a2f1189f272f0f1bb3349c362988a2d097548bdc36f432cca468280d2bae627bddbdd47ac7fceaa08a8f03d538beb478e3725e3521c82db569e8
- MD5 SHA1 SHA512
PySilon-malware-main/.github/ISSUE_TEMPLATE/feature_request.md
- SHA256 2af8493da3d1efbdaa84cc027e8612c8d9cf50b248baf4d9431605eae2bc08e6
- MD5 98e2f1fa0f8345256a1fe8ac4c4c1034
- SHA1 0fe644265463ad4ae31d51c05661479f31ea6b66
- SHA512 583f27da9fe06b5074d224de85249127d6e4f19a406e05810330e501b102c2c9a25dcf00ba24417fd32b49611d6a1c22c3613d5d704babf7bfe69a68eb67f1b4
- MD5 SHA1 SHA512
PySilon-malware-main/.github/ISSUE_TEMPLATE/if-you-are-unsure-pick-bug-report.md
- SHA256 64a2ef3bde1fb3ba96d864a08cd013c70f89b580aa88cc8776cc29d0f3522196
- MD5 ffcbed7dc068db814d35171aedf0954a
- SHA1 4fa5fa245d94f8a3b791f22a96f50eb734005d6e
- SHA512 ceb2a922ed5f08ec97140cb9320436f12e755bf848ee4b47af1c014054ef0424298b0de51a8b62d57eab2c868ead0135926cbf61090481ba697705cb316f8581
- MD5 SHA1 SHA512
PySilon-malware-main/.gitignore
- SHA256 df8ac303f25593185dece7621e2dc1b637d54c564218bcbcafb03c059c68aaab
- MD5 39b24fbab6a19186c4ef2d013caf0f18
- SHA1 c9cce4b1e43150d07f71a4a837ea2d4b3a4f815b
- SHA512 503485b01c55a3e534829f140467f9c0e393e9cd17735f3353c56b8cd9255c3adb57dcb31f230b077d273af8c627c13f3aa39eb096afe3ba1ceb7332e142e1b5
- MD5 SHA1 SHA512
PySilon-malware-main/CODE_OF_CONDUCT.md
- SHA256 88504558eb3470566208af69870487d373e6687575e8c9b9863f517f16309d81
- MD5 6d7c9a9ca1d12ab5b70d16119a32fd5f
- SHA1 5af9310f2682fc8adb74b019b8a5256c60a93f38
- SHA512 17653bc94d98025ea387063e8f218e76cfe088ff3dc8eb7e7f8395a3bc7ad27d0061f6b7bb528a72b14359012874addfc91f562fa9be5b7c68f7bfd4ec9de95c
- SSDEEP 96:b1kS+vFNKWIdGPWFR0sIvBw15XVwqTsS7rOKIjFwoqHoPFTORFq/FQLw5cVGqbfy:iS+vFNKW+kWbGmX7wNjFwToPFTUFq/Fv
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/CONTRIBUTING.md
- SHA256 e771d7f57d38fed778027d4d3f384badc7e05f8748203d4f9d7d8e2835c243ff
- MD5 8ab1e28d114995ce24812a0ad4a1f656
- SHA1 c1ecff0257fd4b9c1dbcc75afc20f2e0b9ac9bba
- SHA512 60d44f85948eada52da0c10fbdbb0862167e2176b2351c67fce2683c404bc00b9c58977a3c3b67e678b41c777e4f593be34bfcb99dbfbbff0e9e3e13f8d01f29
- MD5 SHA1 SHA512
PySilon-malware-main/LICENSE
- SHA256 4714c247e90635c678a981a9793bb3524f1e334b7fe893f57c24f12dab5e3916
- MD5 f89549960c8a57a4bab104680e396312
- SHA1 facf20b73accfbbb1cc5791ae9ee707f4547a483
- SHA512 d1f361c08a6062179df1cc5d5d6dd770e338fb9ca9eb48a289d9199a653b467bdc7754701dc4ec1e749e06c22aeaf77432a7a68e89192de318970ee573a40b3b
- MD5 SHA1 SHA512
PySilon-malware-main/PySilon-linux.sh
- SHA256 c0eca671a36668a9f53b221ba1c96f28d879d0c36931d3d01df75f6b40f753ff
- MD5 371121f4ce94ddaddc31bc515acc3711
- SHA1 5f0f63683a1c7c2163410213c0f5b4b10aba5cb3
- SHA512 809b242431ab3235c5c2f787ddfdf7e7bbec140f6bcb14bd2ab168c74a06e7d3137767f1410dc670f794fd058063fe002dd6f297165d5c10883ff9503b10cc93
- SSDEEP 96:dRnU5upT22O4adoJKHKL0kKEcipK9pmDEKvaoGBlooYsvz5m/iRfA:dDTs4UoN0ODRaoGBlooYIz5m/itA
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/PySilon.bat
- SHA256 11dcf597781ab821bae1bcbc1eeeccdf2b91f10fa4f34e9a8e441cbbd88ff08c
- MD5 cf398d98fb2c781a005680ff61eca5e4
- SHA1 2833f41537d797d6b4434c3698ca251602be1f24
- SHA512 f1b7b38cb8e8d4990cffc682abc26a3bd7041c2ff3791ede86978c6194e040c51e545153495b2518e68163c185c0b8eca67369102b66d0204331b81cac515d0c
- MD5 SHA1 SHA512
PySilon-malware-main/README.md
- SHA256 032fa7c0355091e792a3b4a1df1f452332ab1b4c0bfa44b87b6395d4c0b93f7d
- MD5 2c9afda8500314045d9c29f1728b6ffe
- SHA1 be7804a75ed556be0ed2c53f97e21a61c4d8e9da
- SHA512 6924ed3ed09b397c2911886b1fe8d395c07a444385665ac5d3094072a8cca5e6e882a95f4cd6e1cddb4830f8fe7703a579a38fde526bb28291606a502cd2b62c
- SSDEEP 192:OvrnI470sJ4Q6G5ae4P7ud2HRetehBx2SspzCNTrQdtmQNN4dLwMmSPLur6HyYyj:crnj0saRG5hBkBx2SspzCNrQdEQrEwMS
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/builder.py
- SHA256 443bd85e3bf8d6a5880400025047933bf58e7cccdb9f1c7585fc6932113f2fdb
- MD5 f011ab09f5e640bbf339d9edd93e2739
- SHA1 cfe055600b42ed2eb3b77c3f9632301cd4c3e6dd
- SHA512 bdae087b6fa1a781805fa8a1a2b248e23226261bb4be179dcf1b762f0a1241f7d697797434f23e0820ab39b4c6156c9b4674383cdfb251ce346351132b6ee3b3
- SSDEEP 768:d2PufIVSZvFWL2sthHqxFgYP0kqhvqeju:d22QEZvMLp/HqxFgYP0kqhvqei
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/compiler.py
- SHA256 0202e6c73f6bd429cb704474354898c8aad29885b058a25aca738cda75bbb69d
- MD5 aadef420fde1ac41b1635c7c3ad28e5e
- SHA1 ad6f209d53d39418dbc057dc432527bac5d3f40b
- SHA512 f7f3c78f7a86d4414be2917ae34e35b24f9f18e1ae451a1b748fb21b6e856034f9581a4d13e5a674537180293b106a4a5efebe45e03d9ff69f500be730424194
- SSDEEP 96:ODwmTAYUtPvMjoDpz0I9dwsKgwS8n151QqlrAFUetud18ZCrGOF+L6v:O6YUtPvMMDIul+tQu0qe0p+L6v
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/configuration.ini
- SHA256 6bf9596bfc579b24c40dd2071b64b6cb955a13d24aad541fc580b64e49c1908b
- MD5 8bf49faca5ffcfd5ac470c1c301ff99a
- SHA1 a300316dc9f7321c9afcc1893ab32ada7939066f
- SHA512 a740999e918d4a655713ccd5353188dc642e69575cb36136c77efd478d79ff9e612181249dc4c7bea769d11fc6165d684822f981cf517d248d833ab28e7c4248
- MD5 SHA1 SHA512
PySilon-malware-main/requirements.txt
- SHA256 3c6af4fd3fcbf57afe8aeea07a09a87d568f9757054d719fdf01da7a304624df
- MD5 5ef68bf0120a9cedca446ceba56bf959
- SHA1 c44993bb47aa3565b84bb41fdfba686842970fd8
- SHA512 93289cdffff181647a91c1b3884bcc62356350806360abf9792d033143e642619cdb1c0af2f8150ec671b28d07b74d0e6bd014cb6f3e77edb64322faecb97f51
- MD5 SHA1 SHA512
PySilon-malware-main/resources/crypto_clipper.json
- SHA256 3f7446866f42bcbeb8426324d3ea58f386f3171abe94279ea7ec773a4adde7d7
- MD5 8bff94a9573315a9d1820d9bb710d97f
- SHA1 e69a43d343794524b771d0a07fd4cb263e5464d5
- SHA512 d5ece1ea9630488245c578cb22d6d9d902839e53b4550c6232b4fb9389ef6c5d5392426ea4a9e3c461979d6d6aa94ddf3b2755f48e9988864788b530cdfcf80f
- MD5 SHA1 SHA512
PySilon-malware-main/resources/custom_imports.ini
- SHA256 d71e64cf2c7e567a25dd5930d7eb7c189ce507aecb5365d5bd9e56b644a77c52
- MD5 25a7e616c94f4bef3782ccc1b1f30a28
- SHA1 3141c3a5ae4641c9e072fee9a401b9d2985ac36c
- SHA512 3385a75f3a375118103c0f4f5e455db07e56a9dfd7edeadef2f7b4a44380cfe9a9edd5f8af1a3b0a2a30d4670e9b565ec557de8707f7b0dbb9d904a7b0ebf37c
- MD5 SHA1 SHA512
PySilon-malware-main/resources/discord_token_grabber.py
- SHA256 09b16591c62127f39c138f3d36537d5577042ee9349bd9bca075a0c5bb13c823
- MD5 32c812c4d73d3e3e2fb9ae35e6262dbe
- SHA1 37525639cc07d60bf39ae7c50be248b7ae7832e3
- SHA512 a1f8f0e08bcfd36b6fce4c3d7e9322692e57034f918de3ff42bbc6d30fe6a59e01c52c4276235a23000e3b1f230b44224ebfc34ef466d6c410081c28bea8a139
- SSDEEP 384:xP2g/IOwWb1IdsvxtMwv3tMwvQk6fi3sY5Gl4:1IHaZt7vt7YVfi3s7l4
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/get_cookies.py
- SHA256 50659c02385bd90d268e5c9cb39710d99dd84dc9637b1cf1eeb0413fb624f763
- MD5 9fbfdf3363bef58201cb58f8c47a5c90
- SHA1 c932298a07c455b468bcae7b3fa4868aef5fda02
- SHA512 98d62d0403377dc0a40a9d400bea0d394e972659be0d12360cc398681fc8f1ee3de7aefa7ab68c2fa17081e7261466e233d9760012f1c27b8f309ead964743ca
- SSDEEP 96:kXFbaDLJC/3LPAsTyjHJ2uCE/Mz5ClOla+lfe:kVbsVMEakDCE/MFCsc4m
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/icons/author_icon.jpg
- SHA256 08ab389a690dd5603bf5718ed785f566923fcd16da9ac0aaab086cec95ed75e8
- MD5 bd3553470fe1c2bf4e84519085a23929
- SHA1 45ed64e859b3b2c810980a5c6b69e95e0c84dbd9
- SHA512 e2e2a76f57b108b8e98753e126ccc8dd9c7d682d72bdc9edb2fed5d9a7080fedd19c2e5c11347fef0b8561675209d73c2490deeee3bd001c18c44ab5df1a70a8
- SSDEEP 1536:49zdSOpsdb94FHH78xYd/lD1vYuGET3xxcIui8k3:49TayH78xYd/XfTjc9iD
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/icons/discord/messagebox-exclamation.png
- SHA256 b125684daba9ba96b9fefa9fedcb6b38605865900d2a3b93428837f4f877dd77
- MD5 4a185bfb51de436b62b0464701e90e09
- SHA1 5a7ac91bd071ff3bef781372cd4fffbc874e099d
- SHA512 0c2b4eeb5154fcf469df5dabbffed9e865b20207b8324c731ba0560c42ea8a1b3d2cbeef8949b50d44625752589666d6c4a0a0f370cf55f0d7909242947f508c
- MD5 SHA1 SHA512
PySilon-malware-main/resources/icons/discord/messagebox-info.png
- SHA256 fbd7489f6a400857dccbda670a5d9e000be67f85fd5c03cac2a84e7243ccdd53
- MD5 cfc54f93b2f07f950517251d4665745b
- SHA1 73febe0d844a0e3116a2c8df03f198543d46df0c
- SHA512 8c86844e4e2b9f6ed51c631730e72f563c5a219c56c0296934bcab8d2c5b8756f04c826b2c1acd2af998795672d41dd04625e76fab4d273ebe65f550ce94a381
- MD5 SHA1 SHA512
PySilon-malware-main/resources/icons/discord/messagebox-question.png
- SHA256 00554f4ca35bf4c5e05b6fbd58491127c0e293c321ada7c0e540d6d9cc3daff7
- MD5 d5739502b65a61c1eb661329efbc87e3
- SHA1 49721d2f2b62c8109402d3f4117af56cce5cb965
- SHA512 25a8e0ab7e0ec257e55c5758c2cc819d8ad1faa0a23a279294da968b13d7f60ef9eb314c98a960d21d800396d61f9312f9dc3e0f6678b2e9e62705cbe28ff791
- MD5 SHA1 SHA512
PySilon-malware-main/resources/icons/discord/messagebox-stop.png
- SHA256 c53ce4b3d55f07a0b4e9a54376c86da0866ac46020b0604b1eddd79afe1ba5fb
- MD5 3d9b339c0ce2077a6b7a0d8114157f3a
- SHA1 74abf4ce2a50a15b13f9638788e99ca5c6727e22
- SHA512 84f39d2d0347c44cd5055c4fa30ae10e9ef71080e26b6f691f3fd231fa6f6e528521a08d8c809caf052e703cc2ab0c6f251c070f6241d7044f7b05a902e23d46
- MD5 SHA1 SHA512
PySilon-malware-main/resources/icons/embed_icon.png
- SHA256 d7b4a46a62f2f0a3b7aaf7cb5ea0f9b8eafe14f74c4dab1e81d57f27ffcd8d64
- MD5 8eb2cc150a3615e48ae70003608a03fc
- SHA1 7228b78124b93985eac404be0a5dc7c8d3390622
- SHA512 fa249c859624e686b9d9a096ec3bcc46c6ada5077ef7348dd57cbc5375292ddef70627c4e69e318400e6e290922ed283214c9943b25b9d9b46e02f4ae7d5f224
- SSDEEP 1536:7sHHI96aKm7zdzFDXBdPG3X5XNN11tTuh:UHIUm7zdzFDvPGnDNvIh
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/icons/icon.ico
- SHA256 d26d433ef8993a7de3b47d8719077dc14a8be0c0cd7b8c923d89d7efa31a20b6
- MD5 925ebe8cd1157bd7cf40d709ea543968
- SHA1 237bd13578aae15efa82dddad52df74af6549f69
- SHA512 3d161549bd8a54b9aa6fde675b8200e021a36f576a8e5f88c34d0491179502161fabe822a11695d4523128cb4cd218112fdb3c05501e0e467af72a17b3934881
- SSDEEP 3072:9J2qw4mqMkrQWg73ktZiMv3Ig6CWF2pdplL3nkxPY8gqnLCIQkRNva7:T1w4mqMqQWskjIg65F2DkxPY8MHgN
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/icons/jumpscare.mp4
- SHA256 bea9d33028271f219a9c1786489dbfe8fa7191ba2fe2fbf8bd291130889a6448
- MD5 5ac44ced534a47dc15b18990d8af0e49
- SHA1 11add282a818408965d4455333a7d3d6e30923f1
- SHA512 0ac4256e7dcc6697e7bb6d118a6cd6dbbfe2601a6487512d2c0ca3d73bc6ed4bc3f61d1c76e1c4316ec15c6bc3c5749fd8faf8636bc556a16844811586e21998
- SSDEEP 12288:fYcffE2PRWzmy788d69WIJ/43y98bplZMGImV3yfJVRQjVB6tPv:fYofE2PRW6Id6ZapplulmV3ZP6p
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/libopus-0.x64.dll
- IMPHASH a16037b80461374dbaac126287be81b9
- SHA256 c84da836e8d92421ac305842cfe5a724898ed09d340d46b129e210bdc9448131
- MD5 0e078e75ab375a38f99245b3fefa384a
- SHA1 b4c2fda3d4d72c3e3294beb8aa164887637ca22a
- SHA512 fa838dab0a8a07ee7c370dd617073a5f795838c3518a6f79ee17d5ebc48b78cebd680e9c8cbe54f912ceb0ae6112147fb40182bcfdcc194b73aa6bab21427bfd
- SSDEEP 6144:QzvQP4JEH+xiPuym+Sl1AhOtw6qIUZtvJd3dbK2lbO2miHWQAD03N3hg9/To88jC:Q6Ho+8p0IU3BW2s2miwmOLozjJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
275832
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
CloseHandle
GetConsoleMode
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
SetStdHandle
CreateFileW
SetFilePointerEx
GetStringTypeW
HeapSize
WriteConsoleW
opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_encode
opus_encode_float
opus_encoder_create
opus_encoder_ctl
opus_encoder_destroy
opus_encoder_get_size
opus_encoder_init
opus_get_version_string
opus_multistream_decode
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_multistream_encode
opus_multistream_encode_float
opus_multistream_encoder_create
opus_multistream_encoder_ctl
opus_multistream_encoder_destroy
opus_multistream_encoder_get_size
opus_multistream_encoder_init
opus_multistream_packet_pad
opus_multistream_packet_unpad
opus_multistream_surround_encoder_create
opus_multistream_surround_encoder_get_size
opus_multistream_surround_encoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_pad
opus_packet_parse
opus_packet_unpad
opus_pcm_soft_clip
opus_projection_ambisonics_encoder_create
opus_projection_ambisonics_encoder_get_size
opus_projection_ambisonics_encoder_init
opus_projection_decode
opus_projection_decode_float
opus_projection_decoder_create
opus_projection_decoder_ctl
opus_projection_decoder_destroy
opus_projection_decoder_get_size
opus_projection_decoder_init
opus_projection_encode
opus_projection_encode_float
opus_projection_encoder_ctl
opus_projection_encoder_destroy
opus_repacketizer_cat
opus_repacketizer_create
opus_repacketizer_destroy
opus_repacketizer_get_nb_frames
opus_repacketizer_get_size
opus_repacketizer_init
opus_repacketizer_out
opus_repacketizer_out_range
opus_strerror
Name
.text
Size
319KB
Virtual Size
319KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
94KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=260, version=26715,
count=15, id=259, version=26715,
count=143, id=261, version=26715,
count=30, id=261, version=28427,
count=14, id=260, version=28427,
count=8, id=259, version=28427,
count=3, id=257, version=26715,
count=85, id=1, productName=Unmarked objects,
count=147, id=260, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=256, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=255, productName=VS2019 v16.5.1 build 28611, version=28611,
count=1, id=258, productName=VS2019 v16.5.1 build 28611, version=28611,
PySilon-malware-main/resources/misc.py
- SHA256 98c3c9e981f91b6eb10db0217a16da8c7ba0891e6ad392061d1332fe4af96742
- MD5 d6a7a397e1626ba1e7346f890f31866c
- SHA1 a8d2e69bb24c287232a22055e0333c6da746853f
- SHA512 dfd6f95aee07e1845e0a475b8473f92d73d03927e3835facb3c9ebebacbd4d34725dd26d63419d0b6e06a999d71c22c99e2697db585e19f397d15ba747425b6e
- MD5 SHA1 SHA512
PySilon-malware-main/resources/passwords_grabber.py
- SHA256 6bae31f78fa66e73da3a5d7e7e489c4c79d36da8811fa94d5bbf052eb3d28f86
- MD5 d501b318f5df2e0c18cef8a64161326b
- SHA1 8d3d44fce5a9df6fa728f6f090e0a6c239c90736
- SHA512 683f2d34a12712a65a293d7b7ede3028a52ed0f5aebb6a9c18cbeafcfe769c20b07e7db2af31edb60f4ac870c2aa16a16a625270242ca6b9dbb30f740b1f6340
- SSDEEP 96:D9b569f3ItMS2tdNWkOHKy0BZfnMJ6dHZdgoLHZtU5jNEYDmbVjp5t:Dl569f3wM5N/OdcZvMJ6dH/bZtUjFDGV
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/protections.py
- SHA256 8370294651cf9164b5183033e0adaeb3fea820359f9652f06713c135cf549b59
- MD5 f5f7860862ff9026ae5ef626ccbf7c59
- SHA1 f0b9827394cc388ed07b9cbdb44b8aafc3b44820
- SHA512 24553294f40b295af656ccd39efedd905d6fe9d68fb78e0b4311f22907dd1b6faf2f9f37bd41b0a163a9e85d5c6a88dbb7c54226822199c9f85efaeac68fb0e1
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/audio_control.py
- SHA256 adc2207e1c6b83eb6dabb2963f1f518e7b469394871b70688c7acd26df115a92
- MD5 6a760b020cd268cbb98d75c56a8a4862
- SHA1 42361cb81b705d959c6d4107397f675467531446
- SHA512 a95a174012ae155a1643e1d6f6333a3dbb9b5398c39602fb53ec0c5eebcb140c0b128477a23e01debe6fcfefb9b1bf8e5c1784404d0f1b44a1cf59b55f00a8b2
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/block_input.py
- SHA256 346216866f911ddd4a4f80ac15dcf25d3fc6a49a9024f19facc599561afc1072
- MD5 b70feedd80d5267aadc24132ecda5633
- SHA1 1f4995eee52226ca1c2d6c54ea98900120093c88
- SHA512 0471eb21e3ff9f99f4afb3fb174f453a9b7c7096576791fb8e23a47eba78706ccd53de6011ed3f91eccd23f187b80a56980ef2360c95285fc69d94779cac73c6
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/bsod.py
- SHA256 4f2b74ea05b9d5a79323c3e035e72903bc9a8d9ad834113b21a44006583c2714
- MD5 97d02293e28ece94f91f3a739897e595
- SHA1 328eae0fc97dcbc5949eb5d29298eecda7ae8a08
- SHA512 d3fc6dac3d4a6e587246816dbeaee280a295d7633f58a127c63481d9a864ba012e06ab3ea3b90724b25835f0ca45284be333cdd90e400705b6dcdb4ecb9b71db
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/crypto_clipper.py
- SHA256 a10f1d124d8b4d22cb0a612493c747d06209dd3a793965fda8b4de9d075ff34e
- MD5 8e512488105128ef43b45a026c02bcb2
- SHA1 3728ddbb7f1af53bd3c0a3afce4bf38e99fa7b6f
- SHA512 46118eac86c291bb7e46bf1a9ea07d62388a3e09f25d79c69e08d42f3bdaf6be68dcb60d8e69936c80f97b0dddfcacc6e073a221736f808a4d744ba6aabc8864
- SSDEEP 96:a1LoVOBa5ASQtCd45yO5HvgyKo/WzIRLTwM/hRBSLUrPlb/W/R//tXM/xR0:xOBa5ASQtCd4IO5Pv+0iMJXTZ+/Z/pMQ
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/file_downloading.py
- SHA256 58005391141c40223e90e3e6e1f98ec8ac69b9cb0c46e5fb8ec98cd646eda0dd
- MD5 d3d2c2469f0f3e335cc3bfc343aaeb0d
- SHA1 3db2a71c63dda6ffbe66ddd9c101d7a0f2266be8
- SHA512 ea012e34d593c32b0fdf1ef3376468bc2e40914beb476a4fd3b127eaca659e9957e936017f199bfd893e54ca07a0dcdd3b7cd6579226c0d3f91b4b6d97f5aa7a
- SSDEEP 48:eYQn45DIAtaAhvOiFjjn80sUpSN4G58mVtac6uo/iftaghvrYqy5taghvj:eD4l0AhJjz8M0CG58m2h6Ygh8Egh7
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/file_encryption.py
- SHA256 d2a2f07a62c31bf5b918cede4f14b9a972bf855f9f698cc17965dce487c09342
- MD5 56d4483d3ffb49eca89c85b66b826b73
- SHA1 22c834d2ef6186a51aea48ca43cee44b57e57cdc
- SHA512 c141c916963a6796bb5a80cad6eaa5a877a1f824b8926bf0c153363a4adbdcd39b69b2f13d8872e95958c8a3ff1bad63a015ffbca28a79d98dd5d424a9919b5f
- SSDEEP 96:9VdWghfp0wt8S0lZvHim+lzvH2SghUndGghtvH2Do6vHiNES9+2Lgh3:9TWgL07S0lZaVhPgidGgTIo6a20Lgd
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/file_explorer.py
- SHA256 f4ed8bc78e3ac19f896167b6a18a69c6e20229acdb4065e1b5fb7480042b8704
- MD5 6489665089eeadcd8ad114894372918a
- SHA1 4fb393ac43159fe146a1c0999e7469f33735c1c6
- SHA512 ba7371c5e69d2fbe54fd76faceae6fbc1e044ca93fa19f2632083917ecf1478273f17490b4defdba9c7a436368012d83561dd2121e54cc6ba2882b04f4f706c4
- SSDEEP 192:p614B6PihNpd3xTSALNBP4N0NtKBkm1pEBZuldQByQ8B4:pu4QP0Nt14jum1pEBZulCs36
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/file_removal.py
- SHA256 9e7cf2402021f5d7d358fbc158bdb30b5b2c8a1cd381250744ff55039d881e89
- MD5 f94f8eac82142236fd54cfc84075539c
- SHA1 6974129d9d736855bb6b39041ffd28f65af44c49
- SHA512 fde14da963057e173e8a978d97ae992a6270fd134da7655167d4233286d3bd12cfec6b8da12fd5145daec5332c673ee801acca52833a9ccdd533c58220555def
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/file_uploading.py
- SHA256 b5f48d20fd03e01c30bba0be34f77d5097d394649718608c55eff55a3de624a5
- MD5 c39b1345d3e78ed3742f7a25ae6915e8
- SHA1 671236856b36a8cf0713a39bbffc7eaed87e9ae9
- SHA512 8aed090a15d9f42d3bf37fbdca47da52b220684c1cada4a9a78c166139a68c8c82c7233059b343482fd3b46d2defb0d9a45b697e300bf39b1d55e301acdab8af
- SSDEEP 96:J7leTgjgsVTuc7ZWgy8LOF15Ql4Z0u8mzJPBuaVaabhsXg:JMctVyc4J8LOF1+4ZamdPBXUabv
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/fork_bomb.py
- SHA256 9fba458b2fb8353fbafd21532e5563a074256845334fdf6e31f9c56f66ad0d85
- MD5 c0f807da7ed9cce2b1eb2459e57f85de
- SHA1 f9a1456e51edfaa0ad100c0c4acbd15080682b9d
- SHA512 31bf763de162b756f1698e9af309a5ecac0a26ea1b4e9fd538c93f0f0830c544bbe667a964cb09a316a64819c41795ec7e0f45243d54d0ea75b732b6bdc3b049
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/grabber.py
- SHA256 5365e09895bc90cc6a9290faacb9f50c96503c36d55a0d0d1c389ea6871a8e2b
- MD5 739285967afdab5c47778d822f4bbdec
- SHA1 182fad8031b711aef97bd61b1fe9946f08b80136
- SHA512 a3712021cda79642c26d46a8bd08ae6aaf5d49d025b272968354a6e020a0c933d9a8212602070e634d570f484b42bfa99bd6c6016d7937fd3fe9919c1b8bdd88
- SSDEEP 96:QHyVVfWBEGF2d92hlMgT5whHGWBM18o66liwYkCeAh7Y76dgj5QhyxMFN:e6JG692ff+IWBwiSAu+WuAxG
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/jumpscare.py
- SHA256 3ee3d58819a7fc7725490fd39b747c4fc2ed6c42c870ee1dc0d0a38964cfbfb0
- MD5 680c2c42e33529a177ced47258a4ed81
- SHA1 7fcc94aa3f98fad8a7659ac7ac584f57e9876e76
- SHA512 1b1d3ef2e2cbb46ab41a49c0754d09be1c39aeeb3e5c3276f652000b00707d169500141234f22bfe487f9fb6d4ec2b75cbd6202a37d520863e3edff0a411fd46
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/keylogger.py
- SHA256 22bdcfc14de5859bb365b030ce6908dc907bf937b1c23ac5bd9a990fbed8f7eb
- MD5 607c5ab6acfb5d0296b33cb8508235ff
- SHA1 278821eccd74ed40025373e5e1e76fc6fcf3c731
- SHA512 481bddf9ab2f81b77befd6bdb171e574a1ec0a90ee254cbc3302ae105b43b6f85f2ca850d8aff2cc95f3e4a5a7fac38c9082c7ffeb94e1a32f26c3c0621f1cd6
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/keystrokes.py
- SHA256 5cfdbf8da1cef2aa1cb58c21f1054b15f3aa13bfedddd2560fc554ba767a6c10
- MD5 7b967ef210f2df2c6996545f435698df
- SHA1 78cbf00c5d8432d59cbdef6bf4e4a56cfe0a4096
- SHA512 614e8b58e078641193d1281676850cdc26820c6dc9c4f4c2348f58542009d0396016ce3ed71493d96f65a194b344fd5bccd90a8addfd26273ac26be711efc086
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/live_microphone.py
- SHA256 a68b5a0e6b1c6e46f80a5962841b70aec5223804fd7f410dbcab5bfc3f2f8458
- MD5 35e358e7c2961731d01cc43813be4fb3
- SHA1 416502fefb5447b717f5e9705ac551c9efe01c34
- SHA512 dff36b4dbdbf3692e5484dcad071df8082dfaaf904d1342ff67bb703f4664829cbc8ec96b6b00fe9d0b1adc468a277b46cbba9618d6ed5374084cda9ae40560b
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/messager.py
- SHA256 f7806f46e42c35f3c29981215e7d2c0876db06693523974132d9f73f9123c481
- MD5 ce429bc14f18f35fd0ef7a5af16c0251
- SHA1 84bd70a12f0407a11af792b380a90221b4c523f2
- SHA512 e119f6ff14c4945a33bb73ff868b7b7a0b1d45eab3ade64bf4252439979c688e5b704f87398fc5f855e0917d93ff7b01fc61b8f4f5c320aee064b43742ac10bf
- SSDEEP 96:DrXQ4YHp1ZlHEXHij8WpPhhwDDnH5eZlHEnHqoj6d/orHMO8/JlhRQ+HzWUwy/kF:PQlNVpPMfZO1dMqRNWCsHl
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/microphone_recording.py
- SHA256 e26c391e308216b2a3edf0ccd00ca49fad1dfa23919b65283998e0b222ae658b
- MD5 f96ff48fc180f1ff9061bfbe24e18345
- SHA1 04ef61dc7835254ea290adf02ce6c53417d8fc65
- SHA512 310b945dbf6f5140c91d5e8ff4687ebf465ad1310bd2c83854f07d0ec55ef61572f1c81b87576328ab5400f5a4a2b609e7c26c2ef49f75ffaeb8667b9d0e0792
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/monitor_control.py
- SHA256 12850fb9722937a35032c22e0d0dca816c43a30f4cc5a03fc04e69d82fd2f152
- MD5 6fb7e68e14641ae4f8be4fec758a2bc5
- SHA1 06930272fb80a244e0a4db81d64b920ccb24cc21
- SHA512 74c8d85f3517d9822865fc59720542b3250ef58bd9849567456b753fafc3f2336922a2ff4aeccb30b48340d0e99f83ab23ac7269d4f7a6b16a786da99be74fe6
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/process.py
- SHA256 a998e89011917231b7925b5be0d47c726ff352471a997b2bb3989a762f7ab81d
- MD5 f20f187128b485320c2e4b319a8d8748
- SHA1 55509ae2e6e8c4eac71f034fc7a77894931a89ce
- SHA512 c0bb59ac26e66a6f18110d02653da9edd59e8b8bfa47586d9fab1b3c68661d9231905fc4f5d86e89f46007ac83b1a1e5cefe992568755b89444faf96e265afdd
- SSDEEP 384:bA1UNuAE6g7jPnBU/TC8qfNU/TCPtlmrRm15DD//TCx4/:bA1RX2rprr6rh
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/registry.py
- SHA256 986f39763903c012a9098055673ee9125a745f4871c700b68ff82e8c723485ff
- MD5 bc95e20bb32be6d3f08d2735c0dd2e60
- SHA1 3a9ca9cd739cba37f9fae7c61c505094bd124c07
- SHA512 d7d4f804282df338d28e0c5714c1950e0bbb91188cae50dc57e9a0d94464100bb319016b57b17fbc566ed1612db04a7a1b842d17f8a60c589f73b2f806d494a5
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/reverse_shell.py
- SHA256 bcfb51771358c11da952af0e8918c7fe20f3e72070f454a0103341e9b3dda95f
- MD5 c344127361f7656ff059a9f3a94d4902
- SHA1 77b1c7498f2de0a6f071da69ed9463ae0e98c2c7
- SHA512 c49f33f22ff91655b1cc28d2e7c81cc82bc757d365c89c7c7327b7fcee5a939060eb96b6391f0b34fb74619532a7423fb7ed41c4bfea36e0b74f78e096bf2fe0
- SSDEEP 96:max2utdEYlZw569nl4B698i2dW5O8aKuB4:oeEYlZwY9l4B69Gk08arB4
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/screen_manipulation.py
- SHA256 676d262fc08b3b69853e7cb580eaa3b13b56a94e8d349009e92fc591fa427732
- MD5 8c8639fb05f58d5dc75ac4cb1c13e41f
- SHA1 d0fac489c5c617d54ddb554302fe08011803514f
- SHA512 036ad01e7054a54cabc4fa936b96d7165ef507d5cf023afb93d60f805007f20a49bc9ce32d2df077d7ff8a34f480c9b85d192ec41f141f1ff9bbdbd0d9df24fa
- SSDEEP 192:Nl+W/5gow/gnrgjgGiN1VaWHBAntY4bGeJMyI9W8AJOdZhvz2mPB:NsW/5nw/q2wN1V3HBitY4bGeJMyI9W81
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/resources/source_code/screenrec.py
- SHA256 cb186430f712296b81fe453f7ecb7e3a38fcc383d1f37d8fbe123b2c07ebee16
- MD5 e91678509c2ae1283436adbfe5e7eeb0
- SHA1 4f77228ae1b4966a8bf7fddcaff32ac9c2810be4
- SHA512 8c1bd3750b0e0911849d73307b8fe24746656dd060344a56d5b60c693d6ef4bf883455111cc5541cf09e6c9eebf21723ecfd6c07dee858b3ffcb5c2671ea3ba4
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/screenshot.py
- SHA256 efe10d73cd0de804765331aaf0bbf35316dd492c0883d1fb943bb9c81a3424aa
- MD5 c28ae2501b0b43ab6b0d26e5b91ea1e1
- SHA1 caee21e9c05fc6470f38a8f50c1d0b3e2fd51823
- SHA512 218fe84f9f5ecd51e3fbe2ed687437d8fd1d55f1407ce6ebaec59dfb43ae5ccadd8b6a7128e98e895daae2a6e30155b7de632758f1e8d803e7d2322fed3dc0ad
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/texttospeech.py
- SHA256 aa36a001563a8237a45a536fb7800e38b438921dbe532bb9fa1600287fbf8e03
- MD5 1bdba64de1a3c42726edaa61b2fcd6de
- SHA1 206b2d097b9eacd48eeceb6f48d4f2a943ee10b2
- SHA512 2dd4773252f78426a2ff70504f2ce9e24168250fd398bf8e6356ab0c2dde80504ab5bbb7c7058d1e1baf15e941efc55e4ecae501e38d8bf18053cba4fd2406e0
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/webcam.py
- SHA256 4270b8e31bd0d6764da74561d98790f209c1f8b707ef432498efc88a4d482f63
- MD5 a97ae4162ca683dcb634f68fdec40919
- SHA1 476bf16fc4e0469df4e1709ba4de35e7119a803e
- SHA512 506a6d3a7eff0b016bae94034993b0d51ebe80cee10119465cdbefb6e404eccc880c0a5b8ecbe2637c3341717e5c16d02da407ad8a9b7c09d1a4e4f6bcbf0200
- MD5 SHA1 SHA512
PySilon-malware-main/resources/source_code/website_blocker.py
- SHA256 331dc029aaafadc2ce6360774cfe59d2439152191c8ccd2b2d662d7ad5fbbdcb
- MD5 4c9a17d08dd1a7db60d543c0c8c4718b
- SHA1 afad7709e647d60eeb431c8a5a2c766ef8b677fa
- SHA512 a576f535825f8108358bf9b4a9b73fa17de907f0a7728c1105e864c8f7f4f3872c3683d3ce79f46a8c16da8bf753ea9c0bb15b3d41a3f52ad2866ee2773183c9
- MD5 SHA1 SHA512
PySilon-malware-main/resources/uac_bypass.py
- SHA256 dc254e30154243db553a067b29fc88278c92fe271abdabb51ea24d72bd73fa0a
- MD5 a69179260921f69272bead57ba60fabd
- SHA1 98314565f2a1cdbf21979f7da28fa67ff8c1a440
- SHA512 6ae4e57f6f6bfc50fd911bafcbc8f74d3bf2ec317ec25fa6fb72d3f214703d53bbb107bee82b88e2bd15942b8a23f6be0fa5291e4c8f447c5fd8e27da56a40ec
- MD5 SHA1 SHA512
PySilon-malware-main/resources/upx.exe
- SHA256 c6dd0a6cac2d2153e4666aacf43d487c1b6e2bc16cb7f956514ab02883ef2a42
- MD5 b3dd61fb7352cf96a99d0511c97e0c2a
- SHA1 d2f7a2b512cc19e699ec01ec5384adc1a3fd9221
- SHA512 de7ecd05532e8dfe085ccc09dac6a5e2bb8581e8c0c64b883d34809711900b2c7341e99fe55f6708417ee4fafb374d7f896c70179bb359d23a78c4e806bd5a75
- SSDEEP 12288:oLAkZzH8b5MxqvwAeP5XACx49pFl5ZmhR7GAWNjvGe:oLFdyMxqv1eP5QC49Z+eA+L
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2185600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
UPX0
Size
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
547KB
Virtual Size
548KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 d338b06588612fd2e08f395fcb5a79ba3f8fb72de4269d50133532ba86f93620
- MD5 a9c00e7989eeba9d49fbf103420a5ae7
- SHA1 39578ec1016fdb21d6d6c7cd23584bc803ebe64a
- SHA512 32ed8784bd46ec29fe1d2babc11c2f06205f4d8943feb71ddff45c955b659ffa65a80d7c4c74838a2609056af43d9d230256422e5d36b9fefd7f65fe40e98d12
- SSDEEP 24576:gWTUaTR3F+VYOfoj5HrlXIFu7xkK9pk5+xiHqHtg6m9jY:tUwR3F+ALlYFu7vKjq4
- MD5 SHA1 SHA512 SSDEEP
-
Patched UPX-packed file
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5360
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
.text
Size
896KB
Virtual Size
896KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
PySilon-malware-main/source.py
- SHA256 d4eb0c0a2daabff30b9737618ac8f9c3e7c78a0781eec2e257b8a2f0798c24f1
- MD5 aac55991d2786bdf859ffeea7597aa9c
- SHA1 42f5aa018bed3c52a26d892cc2cc4e8b85fef164
- SHA512 dd3dbc4b760b77636faf8ec3893ec3371a15a52a5d4c47ae9a10b8de5b742bc01331f0f22b9a44e309e338de8d2f0b6ca5b714bf242699920de87b98176bb6d3
- SSDEEP 768:r8CwR6geJHmQXQPn3QmxNCFlz7pSkruQ4WpVVt0lNTlx29:r8CwR6geJHmQXjF7hrnWu
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/tools/drawling_studio/DrawlingStudio.bat
- SHA256 46c011abb3d16d70896c96f03882c302f3d3a0f31546ede5a0cc0eefbe14ecd0
- MD5 c23cad987de11d44272104ac5a22a573
- SHA1 906042a786ca5fbe299605239c28ed83557e53af
- SHA512 c3ac4b833ffe904e9a6eca59dd1b09b08fd5cc5c5dbe92b93a959afb1a3ca997da5f4a35c52c9146ed813feccdba71b424e4e93adc752fa8c7d414ee7b7e8db7
- MD5 SHA1 SHA512
PySilon-malware-main/tools/drawling_studio/assets/create_new.png
- SHA256 7dd55ccc7ac73cbb5a1b99c9a40cd3ace3f05158070e495d419d1dcb1bd3b950
- MD5 105427683ffa6f7e88ab464c3913d9f7
- SHA1 996a16f6f6b9c20df75008d8e0d1baa8abaa5628
- SHA512 ba600b8668e5eed7bad053a612334bfb52ff57905f81b2f422a728c4950f963b2974020cc5e8d6a76b709c7dc7c132a3ad91e029b15aaf35fdbc7c9904b28ae6
- MD5 SHA1 SHA512
PySilon-malware-main/tools/drawling_studio/assets/icon.ico
- SHA256 d26d433ef8993a7de3b47d8719077dc14a8be0c0cd7b8c923d89d7efa31a20b6
- MD5 925ebe8cd1157bd7cf40d709ea543968
- SHA1 237bd13578aae15efa82dddad52df74af6549f69
- SHA512 3d161549bd8a54b9aa6fde675b8200e021a36f576a8e5f88c34d0491179502161fabe822a11695d4523128cb4cd218112fdb3c05501e0e467af72a17b3934881
- SSDEEP 3072:9J2qw4mqMkrQWg73ktZiMv3Ig6CWF2pdplL3nkxPY8gqnLCIQkRNva7:T1w4mqMqQWskjIg65F2DkxPY8MHgN
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/tools/drawling_studio/main.py
- SHA256 da48f620dd9002624bc48f7f92cd55ab54215eec55cdfb91669d9fa85c83de9c
- MD5 892995a5c6a55160d1dbdc02c57b67be
- SHA1 3096d356072471c069d0095fff31f5d3d904a0fc
- SHA512 3fc47fcb91dde5785eeeeb735ce6c5ac5cde0660831a2519f815118e3ac0a5a025be8d67d9408b361f22059e90605fce791e4a7b0b4a8b6875c0b60ef363f077
- SSDEEP 192:jDK3Fg+FV33eY9NtWDD04e5M5i3RxbL+la2G+fkmy/:4fyD04oM5i3XIj8m2
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/tools/drawling_studio/requirements.txt
- SHA256 6269da41d5ef2aaf25a3d53d0a8ca0c5cb2252b8ee8f86bf5caabbf9cc04606d
- MD5 6c854d68c2a549ed1b3ceba5d2c2ab32
- SHA1 cd1a84abe1178350c53603630042181cb7321409
- SHA512 144f8f4bf892ae323ee23171f7f7e128694974b0cd99ac3576fc1d28b0f0233b9df4577956193e86bd598847086d26d4d7ee42d991dd55ff0b0aca4c4bdbc05d
- MD5 SHA1 SHA512
PySilon-malware-main/tools/drawling_studio/saves/previews/skull.png
- SHA256 ee26126b61bf49e518c6668eb1cd71e125ddd85c6a9ebaeea5a55d81064400fd
- MD5 369c790a57f5248bd10e883acc5a54d3
- SHA1 172d67fda6a5aae545b947665ebcc69a6e71c758
- SHA512 a0ca40a761502d61d987939b8f596b84755072d4978ed0dfc71e9782a4f006c9da0d782bbeb835ef09b02e7783988e381262477ddbf507cd5c9862d64ff5b988
- MD5 SHA1 SHA512
PySilon-malware-main/tools/drawling_studio/saves/skull.drawdata
- SHA256 a1d9c2f1ce88265853a55ae02530580a6d2365318007afa9b3cfaf75f12032e8
- MD5 3234ef560f0a62e70af4b93f08f1f36e
- SHA1 347344f0fe772500e3d36b29e07d31b42bebff68
- SHA512 87cb61400edc1b2e83ca8253e0e37b6d0ed91fc502df98a5aa0ab3fc8bc2850894ee6945177803bfc609c5d2dcb24af886292e0c42746fb78f7237637bb0bf2f
- SSDEEP 384:iwycYHUkm+merh/X4+xeV3qazlXxvsdq3Op7ObD3w4PSTmHnaIuLtgFkRTbRAo1k:iwfYHUk5ZneV37zNxvsliw4PjnaDASOZ
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/tools/drawling_studio/studio.py
- SHA256 726f57a8c71ddcdb2217c88ac2c198624a3784b4ad94a68edb8c6c357d959d73
- MD5 a24896fbb917fd04864740c1cdabdcd5
- SHA1 667029049d6fe3ea3850c0ec52fb99ab107b2809
- SHA512 3432639374ee3422a9ed026485c5de49ab61ef42d0b3a2730e383f623de0792e5e7631780c39e4ca9a32ceb11bc60ecb87834eda5f0a8eed1e7eb9e2fb5dfbe7
- SSDEEP 192:1TZyX4iWGyKiCkfHQHZFHJS5CWf0nqeBZQXoNv7CiJX9CWv:1lE4iWGyKiCkfHQPJSHf0nq6ZQXozCil
- MD5 SHA1 SHA512 SSDEEP
PySilon-malware-main/tools/splitter.py
- SHA256 0701d212d96005fb83bd3500b3ece8fb208eaa5fcb8e7117b9e2717ab65c7728
- MD5 b7b45124f8a8cc65c69128e54b4fd920
- SHA1 2940c55cb9df6772d8bd39c145afd241d9d5d08a
- SHA512 cc78dc0c9732519338da78fd62822fb1234760defcbf58576776bcb5be314f7c89a6f0adc48bf75b81c4aebeac78e65211bd9bb29b2d11d62fa76674f4189ee2
- MD5 SHA1 SHA512