pysilon | 1018ad28adc4c368308ed52fbb9d82337b581d7191aa0c11f428ef00c977100c | Triage

Submit
Reports

Overview

overview

Static

static

test.zip

windows7-x64

7

test.zip

windows10-2004-x64

1

test.exe

windows7-x64

7

test.exe

windows10-2004-x64

7

Resubmissions

12-12-2024 18:25

241212-w2m64ssngw 10

10-12-2024 17:57

241210-wjmsmaxjhj 10

Sharing

General

Target

test.zip
Size

30.1MB
Sample

241212-w2m64ssngw
MD5

b92085c896b23aa3614ba281a36c21ca
SHA1

e8c86707789cd46f491a3a3c2ee1ffab047a9d27
SHA256

1018ad28adc4c368308ed52fbb9d82337b581d7191aa0c11f428ef00c977100c
SHA512

9503ee0b2960c1bc92ed922daabd16fd67347139e052fc6bf746b04e8a9d3b9bdb39dc5f1d94a7d61b4c43f0b4f0d59c363e7852984dff63b479eee136799b6d
SSDEEP

786432:2CAHAeVeAeUfBNad2W1f8k70+1fHAAeQL6tCTYJ8a:2DHAq5eUDw2W1Uk0+1fTKCsB

Score

10^/10

pysilon discovery pyinstaller upx

Static task

static1

pyinstaller pysilon

4 signatures

Behavioral task

behavioral1

Sample

test.zip

Resource

win7-20241010-en

discovery pyinstaller upx

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

test.zip

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

test.exe

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

test.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  test.zip
- Size
  
  30.1MB
- MD5
  
  b92085c896b23aa3614ba281a36c21ca
- SHA1
  
  e8c86707789cd46f491a3a3c2ee1ffab047a9d27
- SHA256
  
  1018ad28adc4c368308ed52fbb9d82337b581d7191aa0c11f428ef00c977100c
- SHA512
  
  9503ee0b2960c1bc92ed922daabd16fd67347139e052fc6bf746b04e8a9d3b9bdb39dc5f1d94a7d61b4c43f0b4f0d59c363e7852984dff63b479eee136799b6d
- SSDEEP
  
  786432:2CAHAeVeAeUfBNad2W1f8k70+1fHAAeQL6tCTYJ8a:2DHAq5eUDw2W1Uk0+1fTKCsB
Score

7^/10

discovery pyinstaller upx
- Executes dropped EXE
- Loads dropped DLL
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  
  test.exe
- Size
  
  30.3MB
- MD5
  
  3a2e61b5e8cfcecb121e9fe2f58ca2b5
- SHA1
  
  db8f25c7952d357c05c2cc16fa50f0458e820ce3
- SHA256
  
  2c2aa42eb7f6677f6c19b62370a96acfaa919582d07cabeac74770efc8bb488a
- SHA512
  
  4c7036898179a0b4a383a246066f25b1fea371d82734ee864a0e67d1ad553111e8d599821cde830f7a92049236b8819aeebd15be8995040a2648574b9eebe30d
- SSDEEP
  
  786432:LmMlhONW8SE8m1NxOpl8dPXB6BYeBGQqU+CxeD6mp3a:LdlhsWJE8mxElmPxaYeBRV46W
Score

7^/10

upx
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pyinstallerpysilon

behavioral1

discoverypyinstallerupx

behavioral2

behavioral3

behavioral4

© 2018-2024

Terms | Privacy