pysilon | external[.]zip

resource	yara_rule
static1/unpack002/source_prepared.pyc	pysilon

resource	yara_rule
static1/unpack001/external.exe	upx

resource
unpack001/external.exe

external.zip

SHA256 ea27217e97d5f57437a6b933143077e5c5f42636494cab07d60b7f5fab2f3963
MD5 039564fe80f1311a16c1518df96e4771
SHA1 7a4cf1d8d8098cc0cb43ed9d2fa1da0813dcf588
SHA512 0604f6a011dac3f03e9d7e14b81f842ebce0e57acef603feb94604c7ae1bd4007051e64ec15f6c54915fd780bc88b27971ceefa265140ea751d549192d9c4a19
SSDEEP 1572864:mt/IqTbwTy4AM4YPaYO7AstuP6c2kEkJh6B1hcffMhOiGImKJZUMM7FER:unA+4A3YPaYOWPHXBohcfEhldZvQER
TLSH
T1EB1833EF98853F492BED23313524C6958B77A17EED73F441042CBAC592D1BAC4A1DA23
MD5 SHA1 SHA512 SSDEEP TLSH

Password

2026

external.exe

SHA256 ce825060a7734a67f703caf359137f9fad4c406843abf84f5850c23ce64b586f
MD5 e09c0b597617c1b2927c8a6a84add17c
SHA1 ed8c2a89d655777118226aedbde10dc995640240
SHA512 eed5241f6ffe207e9e2aa687a4b888cc96c4b08cd68b9c9f4d94ffa48fb0f2733699a02a6ba29d35c9b9d6eadee07549bb8ae26e7a256a570c4a2f3ed7066650
SSDEEP 1572864:7cHboilHTIWW7MIp/OkiqOv8im2AUdfhE7elhnfjiYweyJulZUdgJXUqrGyvciTC:gbFRId/OknOv8i3XflLf8puVXUOGziTC
TLSH
T19F18338E0798685CE1CC3577FAFED99960CCC2CDA121DEE5D8B82738A96124CED31D25
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Password

2026

Minor OS version

0

Major OS version

6

Entry point

436208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

discord_token_grabber.pyc

SHA256 cdae7207ce9c96936554a55bf462dc8ae9eb57211e974606e529c0ae2234efd4
MD5 4d0f65411bb15db01d3d17b053bc7493
SHA1 a273fa4316bee36040c798c4b396274c929ee2d6
SHA512 082e24e0b7eb138c3e2a53d2498fd0a884b6a896a8c425dd9c36c800c40f6da66adb18a549123156f66fc8fd49bbf8bbb5aa993538b3b0206b10780a80e34e5c
SSDEEP 384:QGC7RYmnXavkxzG7WltcrhntQ5saa2h12VA:QGCuvk8WltcrttQ5saaCsVA
TLSH
T16C721A529A97C03EFD98B1BC58473B0EFBB406947452934369EB9061BE4F220FE910CE
MD5 SHA1 SHA512 SSDEEP TLSH

get_cookies.pyc

SHA256 d605a8751bdb9b5c288f521936dadd860cbe320fdc66385bb3a0dcdc4a887ef4
MD5 881590b7c2d672f6162ad9a4268767a2
SHA1 caa5f522f991b5b1fc2a3a5943aa541321344b71
SHA512 95fc20ccca8f70034c806a057357348dcf3448fa5e2969d2c8d5d63feae879e9e1a8a27c936d8df95c1a53bc3a677aceec23c33c13d62a370a2f604cbaa2feff
SSDEEP 192:lyal3eiNis9QfUFoxJvm79F211G67+PtAhN:lGiB2lrj7jKlAhN
TLSH
T13C12D648EF8AD03FFC64F1B408016B0EF6A59591B1858347767B8824AF1BA81AD944EE
MD5 SHA1 SHA512 SSDEEP TLSH

misc.pyc

SHA256 53feb95b61b553e94b0e033fe6dbdf73947fca3f3d9b4678653477d473e39f73
MD5 3ca446fa1fe0b69ff1feea4f5ede7c08
SHA1 e22876eaa51c21db5db96f30398e70a104dbc2a6
SHA512 4a1a8ce01df3dc179548744f100e10b576cf4d208fab03d31958bde66fc99969bcc1d314a09437d51a973ba3282f32ee146bb867cee33c6ea39b8b6e3fff5457
SSDEEP 96:XSMlhov6KPDweHPF8+VB7sHIZGhIW0vmyyZ1k93hub:ioovJ0evq+VBXZGh4vmV1kFhub
TLSH
T1A691D7C275C6D8BAFCA0E1F810611F9E73B091A2F244D307318AA6256E7E6704D612DF
MD5 SHA1 SHA512 SSDEEP TLSH

passwords_grabber.pyc

SHA256 10fe6c0dfcae602618571f36acafb511d3093bb3bbec1291deb587b545a535d8
MD5 0158da6ff095129ff83eb6adec1da4be
SHA1 4100b2ff977b4633719b3c561bde4ad5b3d18ee7
SHA512 7c91e25f8773723ab17a326c4277e873ccfc6cd10f73cb474bd2e1c2ec45c607bb515bcda7e3e6ce82868d882d062d6563da01d645afa574429c2cc0730e8a19
SSDEEP 192:A115qWLfhuUIxzOK2cxDJb+XUhetovxEPz:65qWLfMtzVxDAEW7
TLSH
T1D3F1D8867F43C877F825F0F55821271EB7589192B704C707257B906D5D2BAB98D148CF
MD5 SHA1 SHA512 SSDEEP TLSH

source_prepared.pyc

SHA256 c348a421f686ba8423a6102b19e9558c72d3fd4faa1b529aa99fc33aa61b3c9a
MD5 a5e62c9746a8d402e00ce8f9f009ea58
SHA1 d16a314880eec39bcae96286c501408c791571db
SHA512 1b7f4d13fd196c835355c1643d58f0638f46fc68f524b6a4a2c9ae9ba353da09eac4681ffb56935d4e4d285972b214e46f33be1ffc989f849d4371b37c351e73
SSDEEP 3072:Ndf5aOO2UaSMS46o4PZTJ0pZXScT0wfxIvdXzrsTWP:NB5aOO2UaSc6ojpUY0wfksS
TLSH
T1C0F3F5C027A7E93BF556A93D9925334F7B8441B2B222CB076AF7B024FD525206CD21ED
MD5 SHA1 SHA512 SSDEEP TLSH

Detect Pysilon

password-is-2026.txt

SHA256 158a323a7ba44870f23d96f1516dd70aa48e9a72db4ebb026b0a89e212a208ab
MD5 c92a10324374fac681719d63979d00fe
SHA1 aee655773d856fb038536adcfd6472fc7543463e
SHA512 d27859c90f5748d3ec0ef6d4ef49c1755d6ce1ac8035cd4f7dba41b8dd7d440ad8fca164ccc948b5630ef90346ff9279e35d31887e724ab6e0284300a80eb61f
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer