Overview

overview

10

Static

static

10

dist.rar

windows7-x64

1

dist.rar

windows10-2004-x64

7

dist/sourc...ed.exe

windows7-x64

7

dist/sourc...ed.exe

windows10-2004-x64

7

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dist.rar

  • Size

    27.3MB

  • Sample

    241223-y5qshszndy

  • MD5

    096d8971d7821411f9a366a20674dbf4

  • SHA1

    8671530e2945e2196667cf7ad4db54724123f84a

  • SHA256

    7e8219c969672aaf670f5847fcd3c8aa42e3d481ed13a27bcd26055c17f74c79

  • SHA512

    d651a538a3b12333f6494216fef7b19212392439f78aed836287eb347886284b55cd9e0eb6b8c4770e7914e46209c4ac60e36c01c1992e70e3184e3da32d3936

  • SSDEEP

    786432:3sP/XzQKtQ79ZbnVT07wcgBNBIeATADnvdoIGlkoWhd/np:36/sKcnnV0Ucg3lDvmDehdx

Score
10/10
pysilondiscoverypyinstallerupx

Malware Config

Targets

    • Target

      dist.rar

    • Size

      27.3MB

    • MD5

      096d8971d7821411f9a366a20674dbf4

    • SHA1

      8671530e2945e2196667cf7ad4db54724123f84a

    • SHA256

      7e8219c969672aaf670f5847fcd3c8aa42e3d481ed13a27bcd26055c17f74c79

    • SHA512

      d651a538a3b12333f6494216fef7b19212392439f78aed836287eb347886284b55cd9e0eb6b8c4770e7914e46209c4ac60e36c01c1992e70e3184e3da32d3936

    • SSDEEP

      786432:3sP/XzQKtQ79ZbnVT07wcgBNBIeATADnvdoIGlkoWhd/np:36/sKcnnV0Ucg3lDvmDehdx

    Score
    7/10
    pyinstallerupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      dist/source_prepared.exe

    • Size

      30.3MB

    • MD5

      8ae618648362135a4a53818ba701e7b8

    • SHA1

      a3e026702f2d015779054cf5610919cf1d2451c0

    • SHA256

      291f3f62563791ef61ab8d7c1168b529c44b6d84eff3a065a36cdec9ed8d850e

    • SHA512

      7846619694cca6df589e0eb0f4dafe24d8004db152b91fef37f37f0214996562af5ab9551bab270b2b7b54b602ec1f87d671f332b190c36189a7748901f2a0e4

    • SSDEEP

      786432:ZXmMlhONW84W8m1NxOcl8dPXB6BYeB4iOdQ+CxeD6mV3a:ZXdlhsWc8mxBlmPxaYeB0C462

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral3behavioral4

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      924ef065a5167d44170ac81a60cc6fbe

    • SHA1

      ebfa171438758dd9810369d3077f618bfab5bc09

    • SHA256

      78a36fae762432c89f4c0b185e5c227144817199dbde90d16749c6bfc0fb1dd1

    • SHA512

      15a2144fe6e0e081856fd875bcbb239a83da115dce2cda1924f71cfc401f13f681d5047cb80b40cdcdcb617c12d9c12f7bfdc15d38177ace8685c59bb631afdc

    • SSDEEP

      192:bIqqTmuEWauge+M6DA8AYv++JDcNQshU8En5W4NXOYd/G7XW:+9avP588A+DDWRm5FOUG7XW

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      c9a6c4ec57f83d1aa200fe076665c42c

    • SHA1

      42bf07fb97a2ccd29a67067ae9ead40548e046b9

    • SHA256

      ec0628cca3f23628d1ff24a88e8215238eee1601cfe9e49a4525fdca15034497

    • SHA512

      ffe8ba3ff8edb65ff53b9006fa327991f9c272ace5f7cfb387080d8cd23f994842eee49246f1c32d41d6e081dff1a04f9c6b3e5d5e5e2f3cd96fead21fa09745

    • SSDEEP

      192:srJe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:iQBifedokqYnuHN3gQ

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      36ed907d6c57862deacc25f4da2bde11

    • SHA1

      0e21743b8eff2688e13055bfe26467cd3af43559

    • SHA256

      8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087

    • SHA512

      89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4

    • SSDEEP

      96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      cc180daa11732953527c69ac7bbea3b1

    • SHA1

      24ea916374f1fe5981219c1c330ba8f851571e9e

    • SHA256

      6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe

    • SHA512

      5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb

    • SSDEEP

      192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER

    Score
    3/10
    behavioral11behavioral12

    • Target

      source_prepared.pyc

    • Size

      171KB

    • MD5

      030715424d0dfef63be0b4a0b8664f0f

    • SHA1

      51bfb78fe179ecfc4b72253bbd86fa3887bca5aa

    • SHA256

      e5d8fd82b3125d37bc90769942f440c2cfbbac520ead896300f484f3f3bb9765

    • SHA512

      eebe949a8391616aff7e856a92cd7f48e0793b5cbacf3888f7e8d27ffb41ef73738191519dc7408b7e3811db986a25d6a0c3942ec12f848b7318f8ec24c35646

    • SSDEEP

      3072:mUawFCpYRSFS2SVfXUc2oH7iD6GxrhQpvqdaPFHisilDY:PQpaSpS52our6JqdaPgsKY

    Score
    3/10
    discovery
    behavioral13behavioral14

MITRE ATT&CK Enterprise v15

Tasks