pysilon | ed23d5901d16e0bffc36c05423d7a533a3911bbda971e1578ee1b91f4c0ff09d | Triage

Submit
Reports

Overview

overview

Static

static

source_prepared.exe

windows7-x64

7

source_prepared.exe

windows10-2004-x64

9

source_prepared.exe

windows10-ltsc 2021-x64

9

source_prepared.exe

windows11-21h2-x64

9

Sharing

General

Target

source_prepared.exe
Size

82.9MB
Sample

250209-qyl7rasnen
MD5

528dc46ed32feba54b7327ad42c40755
SHA1

9734254323c2d9aecd79b5bdfda748ea8230e939
SHA256

ed23d5901d16e0bffc36c05423d7a533a3911bbda971e1578ee1b91f4c0ff09d
SHA512

9ddb14a48b6409ecf538b86b3492352b3011ca2d503744bd78b80d572a13f880269c3a42b62946f532b18ba033c0935082b978c69b16c62d1d8a42a86706dd5b
SSDEEP

1572864:mbVlgjW5omDOkiqOv8im2AiK8uE7WxDlK8iY4MHHLeqPNLtDSRrAZy/AHo:mpcwomDOknOv8i3nK8mxDMXMHVLtMrAt

Score

10^/10

pysilon discovery pyinstaller upx

Static task

static1

pyinstaller pysilon

4 signatures

Behavioral task

behavioral1

Sample

source_prepared.exe

Resource

win7-20241010-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

source_prepared.exe

Resource

win10v2004-20250207-en

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral3

Sample

source_prepared.exe

Resource

win10ltsc2021-20250207-en

windows10-ltsc 2021-x64

9 signatures

150 seconds

Behavioral task

behavioral4

Sample

source_prepared.exe

Resource

win11-20250207-en

windows11-21h2-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  source_prepared.exe
- Size
  
  82.9MB
- MD5
  
  528dc46ed32feba54b7327ad42c40755
- SHA1
  
  9734254323c2d9aecd79b5bdfda748ea8230e939
- SHA256
  
  ed23d5901d16e0bffc36c05423d7a533a3911bbda971e1578ee1b91f4c0ff09d
- SHA512
  
  9ddb14a48b6409ecf538b86b3492352b3011ca2d503744bd78b80d572a13f880269c3a42b62946f532b18ba033c0935082b978c69b16c62d1d8a42a86706dd5b
- SSDEEP
  
  1572864:mbVlgjW5omDOkiqOv8im2AiK8uE7WxDlK8iY4MHHLeqPNLtDSRrAZy/AHo:mpcwomDOknOv8i3nK8mxDMXMHVLtMrAt
Score

9^/10

upx discovery
- Enumerates VirtualBox DLL files
- Downloads MZ/PE file
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

File and Directory Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pyinstallerpysilon

behavioral1

behavioral2

behavioral3

behavioral4

© 2018-2025

Terms | Privacy