General

  • Target

    Xero.exe

  • Size

    19.0MB

  • MD5

    4e640465fbc3707a0140bfc7f27f6cc0

  • SHA1

    bfd4d14d1ed88a3cc571cddde1f357a2bf30eb06

  • SHA256

    f72a4d14658268c87acb46c3aa9a578207ebb144fcf2a57bb93dcc0180d869ff

  • SHA512

    538f0b3552de91d50d889859fd19da47b315e100aac1dc8a1745227603beffcdc59d619c6f0c28129073b8c601037964714c4cd0c6ad213f768351b7d62fafad

  • SSDEEP

    393216:WqPnLFXlrFlQFDOETgsvfGFwPg1tWvO49rQ1bm:7PLFXNFlQUE7IPm

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xero.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc