Overview

overview

10

Static

static

10

source_prepared.exe

windows7-x64

7

source_prepared.exe

windows10-2004-x64

7

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    source_prepared.exe
  • Size 12.0MB
  • Sample241005-2ldkmazbrg
  • SHA256 5cc9f89fa897d748305dc7db2cfc0e6cdab0497c63e10916618d4f43e0d9d116
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
pyinstallerpysilon

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
    pysilon
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • source_prepared.exe
    .exe 12.0MB
  • discord_token_grabber.pyc
    16KB
  • get_cookies.pyc
    9KB
  • misc.pyc
    4KB
  • passwords_grabber.pyc
    7KB
  • source_prepared.pyc
    173KB

source_prepared.exe

  • IMPHASH 72c4e339b7af8ab1ed2eb3821c98713a
  • SHA256 5cc9f89fa897d748305dc7db2cfc0e6cdab0497c63e10916618d4f43e0d9d116
  • MD5 SHA1 SHA512 SSDEEP
windows:6windowsx64arch:x64

  • Detects Pyinstaller

    pyinstaller

  • Unsigned PE

    Checks for missing Authenticode signature.

Password
password
Minor OS version
0
Major OS version
6
Entry point
52656
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths