Resubmissions

19/11/2024, 19:03

241119-xqqnjavpfr 8

19/11/2024, 18:45

241119-xed6cszeja 8

19/11/2024, 18:21

241119-wzhtlsvjhm 8

General

  • Target

    PySilon-malware-3.7.4.zip

  • Size

    2.0MB

  • MD5

    190c7d2226d80cc1af741cc8712c23d0

  • SHA1

    775e4af2bd0fd4fafee0460a98a37ad511d480de

  • SHA256

    4880acc14a20d6c0349d40c52d84932bdb46acd9b7114a4f66fde17d961c0916

  • SHA512

    8934c0f34d2cb200555ea24a34e5701f49cd3682eeff54d6340c8961d936deecee5ee5a0b350a3fb03421a5c5b6d09258c9db78952d76e612ef3137c75032d96

  • SSDEEP

    49152:mFH89l6XSzKzKpyWkppk3wBA7+nAbnAaoZJlC:gSl6XY3pyVM3OenRoZJlC

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • PySilon-malware-3.7.4.zip
    .zip
  • PySilon-malware-3.7.4/.github/ISSUE_TEMPLATE/bug_report.md
  • PySilon-malware-3.7.4/.github/ISSUE_TEMPLATE/feature_request.md
  • PySilon-malware-3.7.4/.github/ISSUE_TEMPLATE/if-you-are-unsure-pick-bug-report.md
  • PySilon-malware-3.7.4/.gitignore
  • PySilon-malware-3.7.4/CODE_OF_CONDUCT.md
  • PySilon-malware-3.7.4/CONTRIBUTING.md
  • PySilon-malware-3.7.4/LICENSE
  • PySilon-malware-3.7.4/PySilon-linux.sh
    .sh linux
  • PySilon-malware-3.7.4/PySilon.bat
  • PySilon-malware-3.7.4/README.md
  • PySilon-malware-3.7.4/builder.py
  • PySilon-malware-3.7.4/compiler.py
  • PySilon-malware-3.7.4/configuration.ini
  • PySilon-malware-3.7.4/requirements.txt
  • PySilon-malware-3.7.4/resources/crypto_clipper.json
  • PySilon-malware-3.7.4/resources/custom_imports.ini
  • PySilon-malware-3.7.4/resources/discord_token_grabber.py
  • PySilon-malware-3.7.4/resources/get_cookies.py
  • PySilon-malware-3.7.4/resources/icons/author_icon.jpg
  • PySilon-malware-3.7.4/resources/icons/discord/messagebox-exclamation.png
    .png
  • PySilon-malware-3.7.4/resources/icons/discord/messagebox-info.png
    .png
  • PySilon-malware-3.7.4/resources/icons/discord/messagebox-question.png
    .png
  • PySilon-malware-3.7.4/resources/icons/discord/messagebox-stop.png
    .png
  • PySilon-malware-3.7.4/resources/icons/embed_icon.png
    .png
  • PySilon-malware-3.7.4/resources/icons/icon.ico
  • PySilon-malware-3.7.4/resources/icons/jumpscare.mp4
  • PySilon-malware-3.7.4/resources/libopus-0.x64.dll
    .dll windows:6 windows x64 arch:x64

    a16037b80461374dbaac126287be81b9


    Headers

    Imports

    Exports

    Sections

  • PySilon-malware-3.7.4/resources/misc.py
  • PySilon-malware-3.7.4/resources/passwords_grabber.py
  • PySilon-malware-3.7.4/resources/protections.py
  • PySilon-malware-3.7.4/resources/source_code/audio_control.py
  • PySilon-malware-3.7.4/resources/source_code/block_input.py
  • PySilon-malware-3.7.4/resources/source_code/bsod.py
  • PySilon-malware-3.7.4/resources/source_code/crypto_clipper.py
    .py .js
  • PySilon-malware-3.7.4/resources/source_code/file_downloading.py
  • PySilon-malware-3.7.4/resources/source_code/file_encryption.py
  • PySilon-malware-3.7.4/resources/source_code/file_explorer.py
  • PySilon-malware-3.7.4/resources/source_code/file_removal.py
  • PySilon-malware-3.7.4/resources/source_code/file_uploading.py
  • PySilon-malware-3.7.4/resources/source_code/fork_bomb.py
  • PySilon-malware-3.7.4/resources/source_code/grabber.py
  • PySilon-malware-3.7.4/resources/source_code/jumpscare.py
  • PySilon-malware-3.7.4/resources/source_code/keylogger.py
  • PySilon-malware-3.7.4/resources/source_code/keystrokes.py
  • PySilon-malware-3.7.4/resources/source_code/live_microphone.py
  • PySilon-malware-3.7.4/resources/source_code/messager.py
  • PySilon-malware-3.7.4/resources/source_code/microphone_recording.py
  • PySilon-malware-3.7.4/resources/source_code/monitor_control.py
  • PySilon-malware-3.7.4/resources/source_code/process.py
  • PySilon-malware-3.7.4/resources/source_code/registry.py
  • PySilon-malware-3.7.4/resources/source_code/reverse_shell.py
  • PySilon-malware-3.7.4/resources/source_code/screen_manipulation.py
  • PySilon-malware-3.7.4/resources/source_code/screenrec.py
  • PySilon-malware-3.7.4/resources/source_code/screenshot.py
  • PySilon-malware-3.7.4/resources/source_code/texttospeech.py
  • PySilon-malware-3.7.4/resources/source_code/webcam.py
  • PySilon-malware-3.7.4/resources/source_code/website_blocker.py
  • PySilon-malware-3.7.4/resources/uac_bypass.py
  • PySilon-malware-3.7.4/resources/upx.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • PySilon-malware-3.7.4/source.py
    .py .ps1
  • PySilon-malware-3.7.4/tools/drawling_studio/DrawlingStudio.bat
  • PySilon-malware-3.7.4/tools/drawling_studio/assets/create_new.png
    .png
  • PySilon-malware-3.7.4/tools/drawling_studio/assets/icon.ico
  • PySilon-malware-3.7.4/tools/drawling_studio/main.py
  • PySilon-malware-3.7.4/tools/drawling_studio/requirements.txt
  • PySilon-malware-3.7.4/tools/drawling_studio/saves/previews/skull.png
    .png
  • PySilon-malware-3.7.4/tools/drawling_studio/saves/skull.drawdata
  • PySilon-malware-3.7.4/tools/drawling_studio/studio.py
  • PySilon-malware-3.7.4/tools/splitter.py