General

  • Target

    promeniimeprenegostonekomposaljes.exe

  • Size

    17.8MB

  • MD5

    7da987d15c3c66527cadf5bcdc262848

  • SHA1

    168b6e7c778c0f99a374eb051852093ebfcdc964

  • SHA256

    3add38aa9d8333e3f63a8c5ff1c1c01d04ac0365ff711354b69a927442f3ff0b

  • SHA512

    2cce7623ea3a10d05a3866af19e1adfc7271be3391126b30487ac288dfec1899a54050e00f14eebdbe85649a49f476fdfda93894fda81c8935c20a483e48c4d3

  • SSDEEP

    393216:TqPnLFXlr5Q8DOETgsvfGQygKw35qvENlnWv+Nnq:WPLFXN5QhEiu35DzWv3

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • promeniimeprenegostonekomposaljes.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc