General

  • Target

    versal scripts.exe

  • Size

    81.1MB

  • MD5

    8807d9960b2900d66f9659c0a2bae430

  • SHA1

    5f4f67f047b48437c565a71b74b7cf535d0f6838

  • SHA256

    50ccc8a2f06d1f0ca6c62319241c6ebeaea15d7dbdf6c6ad7bb5f345b7cf5f68

  • SHA512

    a3e019db53f5a7bdcfcd1cc034cc87c3e06a96db39a77b102869575b1ece07318a4914b4f733de6d8867819e0f65ea97b555def656ca88803c85ccbebfbc36a3

  • SSDEEP

    1572864:mGKlXOUWtMmpSk8IpG7V+VPhqO+ynE7qliJiYgj+h58sMwII7erWtH/cJFJ:3KRdWMmpSkB05awO+y5wL5kyerIeJ

Score
10/10

Malware Config

Signatures

  • Detect Pysilon 1 IoCs
  • Pysilon family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • versal scripts.exe
    .exe windows:6 windows x64 arch:x64

    Password: 1233

    72c4e339b7af8ab1ed2eb3821c98713a


    Headers

    Imports

    Sections

  • discord_token_grabber.pyc
  • get_cookies.pyc
  • misc.pyc
  • passwords_grabber.pyc
  • source_prepared.pyc