General

  • Target

    Zoticc_PRiv.exe

  • Size

    18.5MB

  • MD5

    15b56312ff8a1b0adc6b5444acde0c2a

  • SHA1

    883716f30ff8111189273c377bdf18bbbd8cecf1

  • SHA256

    aad6aa9559906a1ec95397cff7cf2bab74c7c667014d1f0bfda035440bbec857

  • SHA512

    083722542b848f721f1c33c826d9e3fb4fa030cd910f29facefeaef5dd6c90ae5553fb8d2b04753a6d700c02256e6b793f6985d3a3daf1967820621d970e7b56

  • SSDEEP

    393216:rqPnLFXlrHQ8DOETgs77fGxgee7hvE+B3mN/dq:+PLFXNHQhE7u/e72+kA

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zoticc_PRiv.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc