General

  • Target

    revival.exe

  • Size

    18.5MB

  • MD5

    c2bc490de5447bcf7b18c617d7c4cf68

  • SHA1

    5685d87d1280d308b3014dee93b705ed79ce94e7

  • SHA256

    739497fdd58bb5802053a97e97b58809f31e931b2abd7bd671bf5c2ea8ddabe8

  • SHA512

    151bddd538ac7140799cf2ef117bf3ba9efa92acf91e61561ae963017b802213b890a5e1ba6cd5cb47d7dd645c2345454e1260002361d944e61a4a29e474cacc

  • SSDEEP

    393216:3qPnLFXlrPrQ8DOETgs77fG4gK68vEApZ+i3Oeq:6PLFXNjQhE7nd6V2ki4

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • revival.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc