pysilon | 5647b77efb32d2aa156141f4b19f4c430d171ec8b5a41f68c7bcb38802786f20

General

Target

Patch.exe
Size

81.1MB
Sample

250126-c5bspszrbj
MD5

28f92c8109c23a1d2518b8d307596692
SHA1

e8303bd61ce03b039e8393f50c49aeccbaa61f05
SHA256

5647b77efb32d2aa156141f4b19f4c430d171ec8b5a41f68c7bcb38802786f20
SHA512

39ed46f4d0e28853079c3bd8d21dadf3c6a16ad8bc1937ead29280512a4cfe871485f8e10f7e25170ca65c164f88f5be14569bd31e36b3c21f47695afbb51c9f
SSDEEP

1572864:YvxZQgldWjRnIZSk8IpG7V+VPhqFiE7jblgwviYgj+h58sMwRTZDK:YvxZxzCnIZSkB05awFTewR5p

Score

10^/10

Malware Config

Targets

- Target
  
  Patch.exe
- Size
  
  81.1MB
- MD5
  
  28f92c8109c23a1d2518b8d307596692
- SHA1
  
  e8303bd61ce03b039e8393f50c49aeccbaa61f05
- SHA256
  
  5647b77efb32d2aa156141f4b19f4c430d171ec8b5a41f68c7bcb38802786f20
- SHA512
  
  39ed46f4d0e28853079c3bd8d21dadf3c6a16ad8bc1937ead29280512a4cfe871485f8e10f7e25170ca65c164f88f5be14569bd31e36b3c21f47695afbb51c9f
- SSDEEP
  
  1572864:YvxZQgldWjRnIZSk8IpG7V+VPhqFiE7jblgwviYgj+h58sMwRTZDK:YvxZxzCnIZSkB05awFTewR5p
Score

9^/10

defense_evasion discovery execution persistence upx
- Enumerates VirtualBox DLL files
- Command and Scripting Interpreter: PowerShell
  Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
  execution
- Sets file to hidden
  Modifies file attributes to stop it showing in Explorer etc.
  defense_evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  
  discord_token_grabber.pyc
- Size
  
  17KB
- MD5
  
  db40ce247b464d3ac0d15080f22ce442
- SHA1
  
  eb10f081e16c9566f1b487d39eda3fb8fa4b0de5
- SHA256
  
  74475975b9fc2e15a1432b8e4930b6a8a25dd63511bbc2628ae81483dd569046
- SHA512
  
  c614c93d3ad758bfe1155864328626b98900e95e06c504641f0286ee40e4e0e24eb4d83b06af576e7799d517aae8404f5c9acdc64315c594319c29e13a77b81e
- SSDEEP
  
  384:cGllyAavwW9FaOx817PPQviowoYbCj+MoGWTd0Da8:cIlytvN9oOx8JnQ6owoYOyMImDa8
Score

3^/10
behavioral2
- Target
  
  get_cookies.pyc
- Size
  
  10KB
- MD5
  
  ddc40a1cee51500039f5c98ef7b1d3c9
- SHA1
  
  1e65cf0d7acb74e429844d2ee5b2d39369d17750
- SHA256
  
  1201adef44d0ba8be86b7d4aa4e8f69f1f8f800522fa574291974a3b40250436
- SHA512
  
  c9a89f5fe6ef87d7d8ce63a59f87fd5684d91e5dccfda644d84a40d5316b85b9930e90f096f13e811f646da724bc267ac853c15e451a6888083d5ab0572f27db
- SSDEEP
  
  192:TzOCIeivQfUFPLqwOEVOFc1mNe47+S5zEzzzzz1zz+HoowAE:TzOUi4aFEe4KSPIAE
Score

3^/10
behavioral3
- Target
  
  misc.pyc
- Size
  
  5KB
- MD5
  
  fccbf8762a2d6e382b044d73c9969fbc
- SHA1
  
  9530b874a2fb37cef0bdbc13775d64400c6158b4
- SHA256
  
  bdadc8d5f54a135e4cad6dd398023cc5a8053619489b38d4b22e104215572f89
- SHA512
  
  359b92919a585e4191bceb029e05c9af95816fc023fd5d566d4a5d9fc88b216cace2fe54dacff65decb68d9ad724386467f367a4fadc68b648a44f5b14f84d20
- SSDEEP
  
  96:DSajAihmJG4n3B4SmSSSSlSSSShDwegPbbVxlj0oIHEDS5ejmw01k9Bddpq:eYAfn3ySmSSSSlSSSSeeOPVxx0oIHZeQ
Score

3^/10
behavioral4
- Target
  
  passwords_grabber.pyc
- Size
  
  8KB
- MD5
  
  1ca5633be35a5db415bc83be9852bf0e
- SHA1
  
  710a4da76579449bb0b45eecedd42aea82ba6b35
- SHA256
  
  07a93aa41dbdcd8962b2ad1fcbd7c1bf661130c1cf050a5a4ef6821d30893099
- SHA512
  
  9ac14821d21d9c7345b6cf51d9e1c31f908590fadca061ed4f5c50ea7cd28c92b169aa7985873876989e7108946090695a4c782d8251f5061d27cea7c2f35ccb
- SSDEEP
  
  192:+CE34EAL/GFf/PoXdLO23NsDmqFUhkxNivLI9dRvL:Y4EAL/AfsFO8NsxuOxNn
Score

3^/10
behavioral5
- Target
  
  source_prepared.pyc
- Size
  
  186KB
- MD5
  
  515f80a3e9439c585516cd108b7be99e
- SHA1
  
  1b5b2a3556980ef95300eb20755bab8c05d1e064
- SHA256
  
  a1aa724d18a2c20f563e7adc251974f13c21ede07eb64455981512dc927365c0
- SHA512
  
  ee03593f4110e0b1b9e6c09cf9150d0206c4a98686e15435def0ab82a201ba0e8c086db522f1d230511a589555e3be79fbde4d888f99f89cd6ec631513567c4e
- SSDEEP
  
  3072:wTGmL7zhaA9MmlRBoCJVqvpuSIVMZJ3RkgOcB4GGC8n0:wT7/zhr9BoCTquSImZJ3RkgOcmrCp
Score

3^/10
behavioral6