General

  • Target

    241112-w4hpeaydjb_pw_infected.zip

  • Size

    75.5MB

  • MD5

    f3fae7321d587719b307f9c175defa30

  • SHA1

    e34c7d12017271744743c295c718fdf393c7cc70

  • SHA256

    85c11e87a25190d19b4952d5e871a78d4cce08981f359bfdc443b5e816dacba7

  • SHA512

    c606c62e59d0619da7963622c184ed9ea46a8f09456329e3160252fc8ee66ab882175f52d65e63af3a2324dc4587303077aeb4575f8113ff5e3a01d76a6f7410

  • SSDEEP

    1572864:Jtwb/wrnwLC4f9+f/xSBep8xi5UbxfiGyyN3uulOqrN97rmf:JWsTuC4l+f/xSlxi5UVKX4hl1PO

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 241112-w4hpeaydjb_pw_infected.zip
    .zip

    Password: infected

  • source_prepared.exe
    .exe windows:6 windows x64 arch:x64

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc