General

  • Target

    Release.rar

  • Size

    19.4MB

  • MD5

    ed02659bedc3c6eb22deb866791ebe0f

  • SHA1

    3decb71a7ff7d285fa497e6a101a6e8f717b2e27

  • SHA256

    b5a861a34871224669f7fa5e451013fdab1bd5e209de59be40e98e65633ac38e

  • SHA512

    8902eba29e62f9e7e734ea5f7e71e1dba310ca8a4f196c7c819a92b7add1a1deb88fbbfdd65a8b9e7cb271aa3f1ed33fb99a68715de9dbb1efac0dddaadd0128

  • SSDEEP

    393216:Crva/Ra/vs1x7N1g5XNpWgJX5Jd5wfqgs8SlgDDT0Bf9mhD8eXXmLbp:W8nnAXLJLwCghjTYlmhD8GXSp

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Release.rar
    .rar
  • GT223x.dll
    .dll windows:6 windows x64 arch:x64

    37dad3bc76fc717d179e7a93cc5d5ca7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • builder.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    84e3c93af85a1626e468e36ba3e7f4b3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    a5cd4ce466660edb082740d652e3da88


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    fdafae2c8b4a66b2587a92f1a1a21309


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    9b3ea1ae968bd9689391bcfd888c2439


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    6948d81b8f42a5594e0f60b7f97946c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    03a4741db18ecbc119f374385f252e6c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    a2695356109ff70f0d32cc6933bb5f05


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    96fe36217fb616281d18822c8eae6c02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    3c98c70e1ab746d9738fa991491afff2


    Code Sign

    Headers

    Imports

    Exports

    Sections