General

  • Target

    pythonruntime.exe

  • Size

    26.4MB

  • MD5

    6f621bff20cfa5b7919117baf517ca26

  • SHA1

    de3542bd2d46bdcd976a18a969f73f801a8d1ae8

  • SHA256

    403fa1a83f2d55bd2d7c1f68af0365c19948a4f2a8224c16cffc4ac3cb0b0340

  • SHA512

    12ca89cb8a8f08e5834bf7ada6b21953aaf9f7896942a71c4a3a5118f7d1b580494c0f833f56ed269d85e5c77e0c14533aa698f4d4014af9df9756059b93c415

  • SSDEEP

    393216:sqPnLFXlriSUslVSt/B5QoImcJ9iDOETgs77cGH5gcyX7XvlpIzFGVTvu252zes:dPLFXNnU+4n5QoKxE7x5vmoFmF56

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • pythonruntime.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc