General
-
Target
DemonWare.exe
-
Size
25.0MB
-
MD5
40f76deda9228388017c91aca9621de5
-
SHA1
f45e55b76725263883a9e40cefcd3a9d88ab89c0
-
SHA256
0359e89e0cff0d5537c3e4cf032b1e66f2f49b969a20737563e6ba72d06f1512
-
SHA512
1ad3ee7759aea345f29352ee29fa68193a0c2234b9e92f59f060b7361d6f2ac6cf89f6522c8772f67794a8ef3622cace5152a062630c5627010fe2412f6c345d
-
SSDEEP
393216:SqPnLFXlr4b7n0jcwQ4yRTDOETgs77cGQrVgm8dIYpM/EdUvEFUkPQLsq:XPLFXNEicwQ4yAE7yBfkI1oodkBq
Score
10/10
Malware Config
Signatures
-
Detects Empyrean stealer 1 IoCs
-
Empyrean family
-
Detects Pyinstaller 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
DemonWare.exe
Password: Syfdxdemon12
8c16c795b57934183422be5f6df7d891
Headers
Imports
Sections
-
main.pyc