General

  • Target

    Saveinstancev2.rar

  • Size

    21.9MB

  • MD5

    8e353b29a6c8252c75ea3dfd0cdbbaec

  • SHA1

    d214413ddca02addf35500d507e1fe0acfa4f57d

  • SHA256

    0924eeb2219cb71fad9c01a46385b030aacd02435b2b1f33cc0eaa8ee75eef17

  • SHA512

    3ff2d88b6ab5ccc602b0cb756268ea3dd9ffbe7b5db1c93f063a70e03ede7f66cf3c1a18f2a73898d4523991594a212fbffc67d7539a5fabf79d29d83802cf71

  • SSDEEP

    393216:xNuvWT0XWCXkUcOoTTSZ9EC6sW2+1XlFJoZO1uPvnJn5XP/6mF3qp:xNuex/xOo6ZyeWp1osCvJ5aa3qp

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Saveinstancev2.rar
    .rar
  • Bugs.dll
  • Decompile Maps/16731919637.rbxl
  • Decompiler.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • Lisence.md
  • LoaderScripts.py
  • Roblox HWD/Bugs.dll
  • Roblox HWD/Scripts.py
  • Scripts/Read me.txt
  • Scripts/Scripts.py
  • Scripts/ServerSide.py
  • decompile.dll
  • krnlapi.dll
  • saveinstance.dll