Overview

overview

10

Static

static

10

Total AV.exe

windows10-2004-x64

7

Total AV.exe

windows11-21h2-x64

7

discord_to...er.pyc

windows10-2004-x64

3

discord_to...er.pyc

windows11-21h2-x64

3

get_cookies.pyc

windows10-2004-x64

3

get_cookies.pyc

windows11-21h2-x64

3

misc.pyc

windows10-2004-x64

3

misc.pyc

windows11-21h2-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows11-21h2-x64

3

protections.pyc

windows10-2004-x64

3

protections.pyc

windows11-21h2-x64

3

source_prepared.pyc

windows10-2004-x64

3

source_prepared.pyc

windows11-21h2-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Total AV.exe

  • Size

    12.9MB

  • Sample

    241020-zfz6bsyfqg

  • MD5

    9fda56277cde644b74973888a53109f6

  • SHA1

    50e5574461633876fe6659f5ff975f1d0995cd2e

  • SHA256

    d489087cde47379429b9af4ded868cd0bfc2be600f3ed75f306cc341e64d66ca

  • SHA512

    895ffcb8637b455ebe5fee22cae34dab43c9e9b39a86b80e620aff621a3ef96c9b5f76699e4c547faf800186cc0316a4295d14c2ea7efd4d5122b58c7f335c2a

  • SSDEEP

    393216:HKjS/sRaIZ/iK1piXLGVEwrS7jXnsgyYUZdo:HmZTDiXH+S7zWdo

Score
10/10
pysilonpyinstallerupx

Malware Config

Targets

    • Target

      Total AV.exe

    • Size

      12.9MB

    • MD5

      9fda56277cde644b74973888a53109f6

    • SHA1

      50e5574461633876fe6659f5ff975f1d0995cd2e

    • SHA256

      d489087cde47379429b9af4ded868cd0bfc2be600f3ed75f306cc341e64d66ca

    • SHA512

      895ffcb8637b455ebe5fee22cae34dab43c9e9b39a86b80e620aff621a3ef96c9b5f76699e4c547faf800186cc0316a4295d14c2ea7efd4d5122b58c7f335c2a

    • SSDEEP

      393216:HKjS/sRaIZ/iK1piXLGVEwrS7jXnsgyYUZdo:HmZTDiXH+S7zWdo

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      9d27825766e1dd5e01da0ea3a74e3b81

    • SHA1

      29a6769330ea63b41961a009336790e44e1bdfe7

    • SHA256

      d5ed971b0e74fd0b811af76948a5f7d173c00ff97f6e7313f1089d91749ad6be

    • SHA512

      eaea42559e5b95b1e8dc24e73518ec0b1844a08c1426dce2dd829191882ef7a2179500a97ee79af828bab3d27acd1492f50562a5e7939fa3bca3da2cfeadf385

    • SSDEEP

      192:bOqqAm47Kauge+M6Df8fri+JDcNQshU8En5W4NXOYd/G7XW:wHavP578fbDWRm5FOUG7XW

    Score
    3/10
    behavioral3behavioral4

    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      3232629e868b431a139933fd54246752

    • SHA1

      15f777548080933cb87c9baadaab880d1e9f9dda

    • SHA256

      41f37e31c9866dfa920c3c01c014b221d9e35c73d56a32775c75ca36c79b1dc2

    • SHA512

      65ff8f292cf72c5e201e749855edef8f2aaa32632cf55a986045d1c892dc7bedeecac0c864e69008bb0779dabaddc035b1c533166e53fdfc21b6042150d8a7c8

    • SSDEEP

      192:srNe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:i0BifedokqYnuHN3gQ

    Score
    3/10
    behavioral5behavioral6

    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      36ed907d6c57862deacc25f4da2bde11

    • SHA1

      0e21743b8eff2688e13055bfe26467cd3af43559

    • SHA256

      8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087

    • SHA512

      89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4

    • SSDEEP

      96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g

    Score
    3/10
    behavioral7behavioral8

    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      cc180daa11732953527c69ac7bbea3b1

    • SHA1

      24ea916374f1fe5981219c1c330ba8f851571e9e

    • SHA256

      6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe

    • SHA512

      5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb

    • SSDEEP

      192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER

    Score
    3/10
    behavioral10behavioral9

    • Target

      protections.pyc

    • Size

      1KB

    • MD5

      79d03dbe20754d582345e30b5fe2542e

    • SHA1

      8e7b557777d1e2ae843ee2386a60c7470695faaf

    • SHA256

      1ec23f86f40a11d0e6f846207fee0087e4c01a34375b06b4f4e86b8a708720b4

    • SHA512

      911956f5aaa0702be7a288db9a0a622430700809ee866514de6299df2a44a39da403a010e1fd7a659be7ab9ea871eb8df6c444edb431c95811ea29b4e5baa3fd

    Score
    3/10
    behavioral11behavioral12

    • Target

      source_prepared.pyc

    • Size

      229KB

    • MD5

      bf91fae81947f2cdff0c3685679b330a

    • SHA1

      7ef2002a4946ed0a88b22e47bd0d6cb93ff75d54

    • SHA256

      533d5f7cbceefe280ea19f98eb55571bb5b180844d17d7ba112695d7d8243277

    • SHA512

      e3b11caeca2455f5a778c6c77c58fc114bfdd15bebca08d4903084286b9b500e83ea0693dd8bc28b4ddd15937151aacf98951dad4e951e54e8f67677473e406f

    • SSDEEP

      3072:JrGdZqFjQqi6Xq3D6+od8btkt/qA8HiMN8YpVs7YB:JrUZCi6am+o7tF0Pe6sg

    Score
    3/10
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks