General

  • Target

    tb.exe

  • Size

    18.5MB

  • MD5

    cf2ccc77c279327dbb5f36ec8a3b36fb

  • SHA1

    834fe49d0888c102437782adc6b90dc4c05de88a

  • SHA256

    dd7bd7f75637cb199737c654aec2552811f9868f3252074ffe4ddc17ab24f4f4

  • SHA512

    f5c61888e15a3f14340f5e51018d662d483b16c8c8c9aa04e420483406ab7c1f673bf1e54c3a0a3b07717b78c3404377c7157113121e20230b8623a7137d94d2

  • SSDEEP

    393216:HqPnLFXlrPrQ8DOETgs77fGFZgS/IzIvEK2XS62Tjq:KPLFXNjQhE7WRCFC6J

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tb.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc