Overview
overview
10Static
static
10empyrean-g...ld.exe
windows10-1703-x64
10empyrean-g...on.bat
windows10-1703-x64
8empyrean-g...bug.py
windows10-1703-x64
3empyrean-g...ers.py
windows10-1703-x64
3empyrean-g...ken.py
windows10-1703-x64
3empyrean-g...ion.py
windows10-1703-x64
3empyrean-g...tup.py
windows10-1703-x64
3empyrean-g...nfo.py
windows10-1703-x64
3empyrean-g...fig.py
windows10-1703-x64
3empyrean-g...ain.py
windows10-1703-x64
3Behavioral task
behavioral1
Sample
empyrean-grabber-fixed-main/build.exe
Resource
win10-20240221-en
Behavioral task
behavioral2
Sample
empyrean-grabber-fixed-main/install_python.bat
Resource
win10-20240221-en
Behavioral task
behavioral3
Sample
empyrean-grabber-fixed-main/src/components/antidebug.py
Resource
win10-20240221-en
Behavioral task
behavioral4
Sample
empyrean-grabber-fixed-main/src/components/browsers.py
Resource
win10-20240221-en
Behavioral task
behavioral5
Sample
empyrean-grabber-fixed-main/src/components/discordtoken.py
Resource
win10-20240221-en
Behavioral task
behavioral6
Sample
empyrean-grabber-fixed-main/src/components/injection.py
Resource
win10-20240221-en
Behavioral task
behavioral7
Sample
empyrean-grabber-fixed-main/src/components/startup.py
Resource
win10-20240221-en
Behavioral task
behavioral8
Sample
empyrean-grabber-fixed-main/src/components/systeminfo.py
Resource
win10-20240221-en
Behavioral task
behavioral9
Sample
empyrean-grabber-fixed-main/src/config.py
Resource
win10-20240221-en
Behavioral task
behavioral10
Sample
empyrean-grabber-fixed-main/src/main.py
Resource
win10-20240221-en
General
-
Target
empyrean-grabber-fixed-main.zip
-
Size
441KB
-
MD5
dadb2128ac93837c1facb441aeddb129
-
SHA1
2ad3a9be892565ebed4a6d96bf94051b66a953a1
-
SHA256
838b27b272e687aa997515c0aa7ef5c3081643e51f03a4437191f81c39cbdfcd
-
SHA512
3e8f96996a2ecbbfc0d49b49857cf88451d07e067f6fb7925f128f5974f8d5f4e7a79cbf858e9e0359c7d848c9f8fb95352da302b3ab80a5ed95456e6bd60c0a
-
SSDEEP
6144:yJajO9Iql1HukH5GUMUdWAqvz4VzSYFdQGTB3JEs/hkmOeHtJeQWSE5Pj7glA5Ca:ywjcHl1O2GbzYQq9eoezSEel52fsNkh
Malware Config
Signatures
-
Detects Empyrean stealer 1 IoCs
resource yara_rule static1/unpack001/empyrean-grabber-fixed-main/src/main.py family_empyrean -
Empyrean family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/empyrean-grabber-fixed-main/build.exe
Files
-
empyrean-grabber-fixed-main.zip.zip
-
empyrean-grabber-fixed-main/CONTRIBUTING.md
-
empyrean-grabber-fixed-main/LICENSE.md
-
empyrean-grabber-fixed-main/README.md
-
empyrean-grabber-fixed-main/build.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
empyrean-grabber-fixed-main/img/banner.png.png
-
empyrean-grabber-fixed-main/img/bu0.png.png
-
empyrean-grabber-fixed-main/img/em0.png.png
-
empyrean-grabber-fixed-main/img/em1.png.png
-
empyrean-grabber-fixed-main/img/em2.png.png
-
empyrean-grabber-fixed-main/img/em3.png.png
-
empyrean-grabber-fixed-main/img/footer.png.png
-
empyrean-grabber-fixed-main/install_python.bat.bat .ps1
-
empyrean-grabber-fixed-main/interferences.txt
-
empyrean-grabber-fixed-main/src/components/antidebug.py
-
empyrean-grabber-fixed-main/src/components/browsers.py
-
empyrean-grabber-fixed-main/src/components/discordtoken.py
-
empyrean-grabber-fixed-main/src/components/injection.py
-
empyrean-grabber-fixed-main/src/components/startup.py
-
empyrean-grabber-fixed-main/src/components/systeminfo.py
-
empyrean-grabber-fixed-main/src/config.py
-
empyrean-grabber-fixed-main/src/main.py