General

  • Target

    nkspoof.exe

  • Size

    15.7MB

  • MD5

    ec1871f7f4c8d930c5ec03b0d4bab891

  • SHA1

    e94cfcaba2e9be4c42b370c6de00441d4e6d35a5

  • SHA256

    a6de052c25a72d73c7c11e19ce88ad0ef40a403b4ecd53690d70d83eee166842

  • SHA512

    a9c6debc7d11cf53ea28bace220f6303c71dba4a2f377a4461f4de2ffcf20ac1de5b7f255b1b5cd81a2aba55963c81d596fb734914e73dd0c1d098693592e8ba

  • SSDEEP

    393216:BLFXlr1Q8DOEfrGpgYx7vE/glaTYiNAq:tFXN1Qhn7K/hco

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nkspoof.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc