General

  • Target

    Nebula.exe

  • Size

    17.7MB

  • MD5

    18e7be26e2d977a1329e85c94ea6b3ca

  • SHA1

    288c79040a1d8f1cc969355529d653c623c25b8c

  • SHA256

    28514f796c87d65f3ec176d2573a4fc0d8fb3e456706a2bcaa7a15700a4b3e8f

  • SHA512

    deab6e1ea32ffb428e827120a78591560c79a604b2d34fc1f5bea639d317e0852a9846b06b6017999d9bb30c8452c4cb59680c8a40f24522d33f6e1db98400f1

  • SSDEEP

    393216:WqPnLFXltZK9Qf8nAB3Q0GhgiRSSCvEuX3X/ZLx:7PLFXtK9Q0kAX7RSSb4XF

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nebula.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc