Overview

overview

10

Static

static

10

Resubmissions

22-09-2024 16:17

240922-trp7lsyclh 10

22-09-2024 16:16

240922-tqzpnaycjc 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    multi tool.rar

  • Size

    49.4MB

  • MD5

    ca8f8a01840deee4c91e72bddd162375

  • SHA1

    6edb1e425f21a800631d4bff5b7713de97aa4b61

  • SHA256

    2475057e86ae6b275f649474564115858530b0d0d556b10e678af48151c1b683

  • SHA512

    144732103cef741f79f98b509bfbca7ab5fb2c81e27216cf7c7a36a8d87b5fd6c11109db9846ca7da751663a1d3be84348263a6ca7298abedd5bb44f00167251

  • SSDEEP

    1572864:aqay71Cws3VEdxszS5qay71Cws3VEdxszSs:ha0VslKCa0VslKC

Score
10/10
pyinstallerempyrean

Malware Config

Signatures

  • Detects Empyrean stealer 2 IoCs
  • Empyrean family
    empyrean
  • Detects Pyinstaller 2 IoCs
    pyinstaller
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • multi tool.rar
    .rar
  • evonic/dont open/main.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • evonic/dont open/main2.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • evonic/read me.txt
  • evonic/run__.bat