General

  • Target

    svchost.exe

  • Size

    17.7MB

  • MD5

    3bb794980d4366b00efec6946ad9ea5b

  • SHA1

    185e9749641d9ce5e1aee8a905f932a6703759f3

  • SHA256

    e6ddf79c31b8591c4eecc13a853b940896e8bf2f406ec973444160c8575f352b

  • SHA512

    1064cde31561d98447af50800b47e5e11bd2dc9802f12daf5581cb2d7ab5041822449c2c359b0a6d107c812de331ce4ff747be6a2d91b83c5451a8204977b60f

  • SSDEEP

    393216:pqPnLFXlreQpDOETgsvfGFwCgNivEBHcJ5q:gPLFXNeQoE227Ca

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • svchost.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc