General

  • Target

    cheeto.exe

  • Size

    21.2MB

  • MD5

    3b5ad74ba45a8532a2fd64b2ac483ca6

  • SHA1

    66a01fd8a806e6d53f39021e483c13be8c131d19

  • SHA256

    7146797ae555598dd47d389c865555f07b1a4734887c35fae86ead9b641bd7d1

  • SHA512

    3563b3c3e343b4e981ccff156331ccdf64ee74138c57164fd84bf0006e00d4c3ca381ab1fa6c2b83e64833d92db352d1a69f87deab2bb1747491ac9a5ecfb129

  • SSDEEP

    393216:7qPnLFXlr4mQvyRTDOETgsvcGyIgTBZpMpDsdDd9RnDStjV0s:OPLFXN/QvyAENsSiDJDStd

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheeto.exe
    .exe windows:5 windows x64 arch:x64

    Password: 1234

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc