General

  • Target

    Fpsbuddy.exe

  • Size

    18.5MB

  • MD5

    f66469754fe4edfa2946fa668ce06163

  • SHA1

    32d03c6e89b22d1a08a60d3321a2a7f190a9e467

  • SHA256

    ab09b91d3b2bd7054c27ed642eb2eafb6eed627176bc4d401b3b65e812ac83c8

  • SHA512

    aecafd4a3d69c34b4c319fdf10f1505e90fd42e6d7f3422078d993734a81fdf95b307743f2eb82d5705d8435ca31df7c0468c7977c8f3f704c5bb028ceceb7f8

  • SSDEEP

    393216:KqqPnLFXlrPQ8DOETgs77fG1gIQBUJ6Zjnlneplr:K/PLFXNPQhE76naJNlnWr

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fpsbuddy.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc