Static

static

10

Resubmissions

26-08-2024 05:30

240826-f7gzaaxerd 10

26-08-2024 05:27

240826-f5s9jaxelh 10

26-08-2024 05:11

240826-fvsj9aycnk 10

26-08-2024 05:06

240826-frk11ayaqk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    blackstar.rar

  • Size

    82.4MB

  • MD5

    224e0218bdd50fa5aa60dc91c13de7e3

  • SHA1

    da5a672037ea779e4e0d2c313a8d99d3c5328c16

  • SHA256

    403e511dbc49633c039bad4d192a7a250e7d05474c41527b9d2a4b7647561c97

  • SHA512

    1c0c5f08e64477852231181283332de19011355b00875388c3fd1fff2ee7e3aa5000ceb96aed23b2eb8faaaec72a52a316683fc8c58a185364f61928c8924b9b

  • SSDEEP

    1572864:OukZBQTVE3yKUl6QyQyFprFzxCZPvNFe3ziYErKI9tBaMCuWdodMjv:OfaiNQQrFlCZPvNFkpEWIbUt

Score
10/10
pyinstallerpysilon

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
    pysilon
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • blackstar.rar
    .rar
  • blackstar/FluxAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • blackstar/Fluxteam_net_API.dll
    .dll windows:6 windows x86 arch:x86

    d7d27535ebdca8ed5b1d96e63f0cfe19


    Headers

    Imports

    Exports

    Sections

  • blackstar/I NEED HELP WITH EVON.txt
  • blackstar/KrnlAPI.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • blackstar/Noto_EHC_bypass.dll
  • blackstar/Oxygen API.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • blackstar/bin/Monaco.html
    .html .js polyglot
  • blackstar/bin/tabs/New Tab 1
  • blackstar/bin/theme.evon
  • blackstar/bin/vs/base/worker/workerMain.js
    .js
  • blackstar/bin/vs/basic-languages/bat/bat.js
  • blackstar/bin/vs/basic-languages/coffee/coffee.js
  • blackstar/bin/vs/basic-languages/cpp/cpp.js
  • blackstar/bin/vs/basic-languages/csharp/csharp.js
  • blackstar/bin/vs/basic-languages/csp/csp.js
  • blackstar/bin/vs/basic-languages/css/css.js
  • blackstar/bin/vs/basic-languages/dockerfile/dockerfile.js
  • blackstar/bin/vs/basic-languages/fsharp/fsharp.js
  • blackstar/bin/vs/basic-languages/go/go.js
  • blackstar/bin/vs/basic-languages/handlebars/handlebars.js
    .js
  • blackstar/bin/vs/basic-languages/html/html.js
    .js
  • blackstar/bin/vs/basic-languages/ini/ini.js
  • blackstar/bin/vs/basic-languages/java/java.js
  • blackstar/bin/vs/basic-languages/less/less.js
  • blackstar/bin/vs/basic-languages/lua/lua.js
  • blackstar/bin/vs/basic-languages/markdown/markdown.js
    .js
  • blackstar/bin/vs/basic-languages/msdax/msdax.js
  • blackstar/bin/vs/basic-languages/mysql/mysql.js
  • blackstar/bin/vs/basic-languages/objective-c/objective-c.js
  • blackstar/bin/vs/basic-languages/pgsql/pgsql.js
  • blackstar/bin/vs/basic-languages/php/php.js
  • blackstar/bin/vs/basic-languages/postiats/postiats.js
  • blackstar/bin/vs/basic-languages/powershell/powershell.js
  • blackstar/bin/vs/basic-languages/pug/pug.js
  • blackstar/bin/vs/basic-languages/python/python.js
  • blackstar/bin/vs/basic-languages/r/r.js
  • blackstar/bin/vs/basic-languages/razor/razor.js
    .js
  • blackstar/bin/vs/basic-languages/redis/redis.js
  • blackstar/bin/vs/basic-languages/redshift/redshift.js
  • blackstar/bin/vs/basic-languages/ruby/ruby.js
  • blackstar/bin/vs/basic-languages/rust/rust.js
  • blackstar/bin/vs/basic-languages/sb/sb.js
  • blackstar/bin/vs/basic-languages/scss/scss.js
  • blackstar/bin/vs/basic-languages/solidity/solidity.js
  • blackstar/bin/vs/basic-languages/sql/sql.js
  • blackstar/bin/vs/basic-languages/st/st.js
  • blackstar/bin/vs/basic-languages/swift/swift.js
  • blackstar/bin/vs/basic-languages/vb/vb.js
  • blackstar/bin/vs/basic-languages/xml/xml.js
  • blackstar/bin/vs/basic-languages/yaml/yaml.js
  • blackstar/bin/vs/editor/contrib/suggest/media/String_16x.svg
  • blackstar/bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • blackstar/bin/vs/editor/editor.main.css
  • blackstar/bin/vs/editor/editor.main.js
    .js
  • blackstar/bin/vs/editor/editor.main.nls.de.js
  • blackstar/bin/vs/editor/editor.main.nls.es.js
  • blackstar/bin/vs/editor/editor.main.nls.fr.js
  • blackstar/bin/vs/editor/editor.main.nls.it.js
  • blackstar/bin/vs/editor/editor.main.nls.ja.js
  • blackstar/bin/vs/editor/editor.main.nls.js
  • blackstar/bin/vs/editor/editor.main.nls.ko.js
  • blackstar/bin/vs/editor/editor.main.nls.ru.js
  • blackstar/bin/vs/editor/editor.main.nls.zh-cn.js
  • blackstar/bin/vs/editor/editor.main.nls.zh-tw.js
  • blackstar/bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • blackstar/bin/vs/language/css/cssMode.js
    .js
  • blackstar/bin/vs/language/css/cssWorker.js
    .js
  • blackstar/bin/vs/language/html/htmlMode.js
    .js
  • blackstar/bin/vs/language/html/htmlWorker.js
    .js
  • blackstar/bin/vs/language/json/jsonMode.js
    .js
  • blackstar/bin/vs/language/json/jsonWorker.js
    .js
  • blackstar/bin/vs/language/typescript/lib/typescriptServices.js
    .js
  • blackstar/bin/vs/language/typescript/tsMode.js
    .js
  • blackstar/bin/vs/language/typescript/tsWorker.js
    .js
  • blackstar/bin/vs/loader.js
    .js
  • blackstar/blackstar_start.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc
  • blackstar/force_clone.txt
  • blackstar/runtimes/win-arm64/native/WebView2Loader.dll
  • blackstar/runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:5 windows x64 arch:x64

    3fd78a8f50b85b627af2d0fc485b5e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • blackstar/runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:5 windows x86 arch:x86

    a64b009ff2c9503726050a45e231f4c9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • blackstar/version.data