General

  • Target

    FollowBotInstaller.exe

  • Size

    18.5MB

  • MD5

    588e31375fecb59f441e6b67aac76818

  • SHA1

    fb6719e53658407f00f966e8874a43bf58629a73

  • SHA256

    54add27d40f7500e45f1ae49db4a6ec2b0e64f5900f089be67736996796e7966

  • SHA512

    830c79d88d9cc1b953fd97efe6a6be2f256cd0f53d6b8882fda65b7c516aab13fcfd649ce87e702bb2c066db3c5b03f6d319d75a719f4ed87839abb0b9ff89ec

  • SSDEEP

    393216:xqPnLFXlrUiQpDOETgsfggfGcgIDSitvEx2nmoPLB:YPLFXNUiQoEf1zD7CcmG

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FollowBotInstaller.exe
    .exe windows:5 windows x64 arch:x64

    Password: 12343223

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc