Overview

overview

10

Static

static

10

source_prepared.exe

windows10-2004-x64

7

discord_to...er.pyc

windows10-2004-x64

3

get_cookies.pyc

windows10-2004-x64

3

misc.pyc

windows10-2004-x64

3

passwords_grabber.pyc

windows10-2004-x64

3

source_prepared.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    source_prepared.exe

  • Size

    60.4MB

  • Sample

    240705-cmbd8azeqm

  • MD5

    f7bd0be68ede6f5eac8d37ec6f206dc0

  • SHA1

    e8ecaf5f622b1e227020af73f1b015b521a68b95

  • SHA256

    a7fc24ccde6fa782ae7f1c9bf895beb3d945eb6481e77b5ed457b919f7fcdea4

  • SHA512

    105e8bdf15d852261f61d09a00c4670c630531b74ee744fd2760a62522bcd72c8c78c3ed7281b87a2e1c72c8bb71cda9c798957ba55efbed2b4fc41484c5a921

  • SSDEEP

    1572864:YiI42qHWB75iV4CbuDzmQF5Grse0zvRIQUBI3l/Z9U:a42qHO5iV4nGQbRe0zJcBIf9U

Score
10/10
pysilonpyinstaller

Malware Config

Targets

    • Target

      source_prepared.exe

    • Size

      60.4MB

    • MD5

      f7bd0be68ede6f5eac8d37ec6f206dc0

    • SHA1

      e8ecaf5f622b1e227020af73f1b015b521a68b95

    • SHA256

      a7fc24ccde6fa782ae7f1c9bf895beb3d945eb6481e77b5ed457b919f7fcdea4

    • SHA512

      105e8bdf15d852261f61d09a00c4670c630531b74ee744fd2760a62522bcd72c8c78c3ed7281b87a2e1c72c8bb71cda9c798957ba55efbed2b4fc41484c5a921

    • SSDEEP

      1572864:YiI42qHWB75iV4CbuDzmQF5Grse0zvRIQUBI3l/Z9U:a42qHO5iV4nGQbRe0zJcBIf9U

    Score
    7/10

    • Loads dropped DLL

    behavioral1

    • Target

      discord_token_grabber.pyc

    • Size

      16KB

    • MD5

      09486f798d4b35d32b93eb08c913f2de

    • SHA1

      03578821030ba06a7753222af22333697450ea9d

    • SHA256

      e9b5b0f4dd3c98d59344e7c02ed278aa38a3d059dd70b2274fde217fd94148c3

    • SHA512

      ecabac7968d2cd866c862b9f2ec42cc516cebd6de41024a59ac701c987d4fa40158f5459415dd0695bd292803ec213c9c574f28bd0b6c088956c5b681ca10521

    • SSDEEP

      384:zDC7RYmnXavkQzG7WStrXqdntQ5saa2hg2JL:zDCuvkbWStrXqhtQ5saaCBJL

    Score
    3/10
    behavioral2

    • Target

      get_cookies.pyc

    • Size

      9KB

    • MD5

      9bdb8627dc166823e7d60603575b689a

    • SHA1

      de56b5f8b3e891ad07760544132bd357f1e62368

    • SHA256

      1078edad1660d103c2135793ea9707e4ef7877fb4be7b87c0e538ed84920212c

    • SHA512

      789d21f744eff44456585fd27cd88a67e26b55ed1a043aa76a4b5e63f7dfad99013ca09b15fabecd041f8d35f8d22502c08efd0bb11d26ca083f02a64eae6d3a

    • SSDEEP

      192:kNal3eiNis9QfUFoxJvm79F211G67+PtAhN:kJiB2lrj7jKlAhN

    Score
    3/10
    behavioral3

    • Target

      misc.pyc

    • Size

      4KB

    • MD5

      204ee497021e32209ddde0c015b4dc19

    • SHA1

      6aa2c039e6b6fbfb3620d4fe42d115553702146b

    • SHA256

      a8355eef70645468d11a410d1402e0cab31a194e87172b523b1ff3dea5dbb0c2

    • SHA512

      961b15c0efe0478fdf9287e7b3b709233bcd9524be708f426b75dc91eb07ddfc2a2ce4f347d52a3e7402f5307ab755af093d660662fd3c4c465fd41e8d138d12

    • SSDEEP

      96:ySMlhlv6KPDweHPF8+VB7sHIZGhIW0vmyyZ1k93hub:LolvJ0evq+VBXZGh4vmV1kFhub

    Score
    3/10
    behavioral4

    • Target

      passwords_grabber.pyc

    • Size

      7KB

    • MD5

      bbb6ab7b8230cca0ac46532a612143d0

    • SHA1

      4bf5ebb19c5807cfb4b48191ec65b329d67763cd

    • SHA256

      8655f8885fa28c9633563e0264e65206eae277fb020f85a836be27f0fc3d7ec4

    • SHA512

      21353818de5a2e192bcdb38e0765b675258ae733eb634c1b01fbf53dc22946b0eee127c975be7a63d20a8db2b87521fe0ed85f2ec09dcc2f3adf5a7fea0b180e

    • SSDEEP

      192:h114qWLfhuUIxzOK2cxDJb+XUhetovxEPz:V4qWLfMtzVxDAEW7

    Score
    3/10
    behavioral5

    • Target

      source_prepared.pyc

    • Size

      149KB

    • MD5

      0fa39b7f1308d11f327b42c1658c4e4c

    • SHA1

      30861e311f03a6bbdf4b1d0c47cbd281e5beb0df

    • SHA256

      7c34427cf35fbaa56067414fee720b3f64f148e752e3d30d1614c14b107c97b2

    • SHA512

      a1738a93ece3a720c7613da20660dd6ca43e51b48b4f374680f3af0d147f884ded3ba9a1f7baa5ed664b071e7fa4ef521e242862e6189c3a491aa2831fca9c05

    • SSDEEP

      3072:R1meraOOmJyAcCvoLPZTJ0pZF1Dy2Sr+KeIvdXzXsTWd:R1lraOOmJy+ocpb1Hksi

    Score
    3/10
    behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

6
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks