Overview

overview

10

Static

static

10

source_prepared.exe

windows7-x64

7

source_prepared.exe

windows10-2004-x64

7

discord_to...er.pyc

windows7-x64

3

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows7-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows7-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows7-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows7-x64

3

source_prepared.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    source_prepared.exe

  • Size

    43.3MB

  • Sample

    241225-lr9x1s1ray

  • MD5

    c7e375b66b53320ee07557295b313f06

  • SHA1

    05a2a346f65c3354d372c751b5f8d41f3843bce6

  • SHA256

    22baaba25797de596354e5d2120e81300c6e3e9b790ea6b4b6a4eee1b35967ff

  • SHA512

    3678d3027036c346133839b2082fa755ad6d789ee18182e5bf3d2e5cffa70715a6c7abf522df759b6541690a99d076c10daf59ff7fe4bf7453d08d0c037b0757

  • SSDEEP

    786432:+mbcrJbTiumfS7yyyxDiXHvIiBNu08e2KnDER0rhE5KUlT3VsbAo:+drxTivfSD5NTN2KDERwIzV6Ao

Score
10/10
pysilondiscoverypyinstallerupx

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      43.3MB

    • MD5

      c7e375b66b53320ee07557295b313f06

    • SHA1

      05a2a346f65c3354d372c751b5f8d41f3843bce6

    • SHA256

      22baaba25797de596354e5d2120e81300c6e3e9b790ea6b4b6a4eee1b35967ff

    • SHA512

      3678d3027036c346133839b2082fa755ad6d789ee18182e5bf3d2e5cffa70715a6c7abf522df759b6541690a99d076c10daf59ff7fe4bf7453d08d0c037b0757

    • SSDEEP

      786432:+mbcrJbTiumfS7yyyxDiXHvIiBNu08e2KnDER0rhE5KUlT3VsbAo:+drxTivfSD5NTN2KDERwIzV6Ao

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      9d27825766e1dd5e01da0ea3a74e3b81

    • SHA1

      29a6769330ea63b41961a009336790e44e1bdfe7

    • SHA256

      d5ed971b0e74fd0b811af76948a5f7d173c00ff97f6e7313f1089d91749ad6be

    • SHA512

      eaea42559e5b95b1e8dc24e73518ec0b1844a08c1426dce2dd829191882ef7a2179500a97ee79af828bab3d27acd1492f50562a5e7939fa3bca3da2cfeadf385

    • SSDEEP

      192:bOqqAm47Kauge+M6Df8fri+JDcNQshU8En5W4NXOYd/G7XW:wHavP578fbDWRm5FOUG7XW

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      3232629e868b431a139933fd54246752

    • SHA1

      15f777548080933cb87c9baadaab880d1e9f9dda

    • SHA256

      41f37e31c9866dfa920c3c01c014b221d9e35c73d56a32775c75ca36c79b1dc2

    • SHA512

      65ff8f292cf72c5e201e749855edef8f2aaa32632cf55a986045d1c892dc7bedeecac0c864e69008bb0779dabaddc035b1c533166e53fdfc21b6042150d8a7c8

    • SSDEEP

      192:srNe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:i0BifedokqYnuHN3gQ

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      36ed907d6c57862deacc25f4da2bde11

    • SHA1

      0e21743b8eff2688e13055bfe26467cd3af43559

    • SHA256

      8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087

    • SHA512

      89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4

    • SSDEEP

      96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      cc180daa11732953527c69ac7bbea3b1

    • SHA1

      24ea916374f1fe5981219c1c330ba8f851571e9e

    • SHA256

      6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe

    • SHA512

      5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb

    • SSDEEP

      192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      source_prepared.pyc

    • Size

      171KB

    • MD5

      0033f1902a10722ac1044e734643f8ec

    • SHA1

      9ec97241216021cd11fb2613688f3cb9dbcb4281

    • SHA256

      4150a7a6fe3f978db92bfd7e0d76f048a68a1408787b8c56a47376ba77d9a7db

    • SHA512

      2cf12e7feb4f601896d5c01fb0976e67a27def8331a42109382f626fdd19d37dd3c9770dc0b05582bcdfe00b8968b230be6191e5f3c78c9422d54b03dd9ec90f

    • SSDEEP

      3072:N5UawFHcxY47bS8BVfkD4gon7iD6GxnhQp0pQIesilDY:NESxr7hBjgoOn6awsKY

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks