General

  • Target

    polarbsttool.exe

  • Size

    17.7MB

  • MD5

    f263321d315e299c2eb8511aebdc64ff

  • SHA1

    96ebff77b203ddc92096715556ea0ea528169f73

  • SHA256

    48a54831452aac0418e39589a859550a5dd4259eafb82bb6cb16b1aa56b7cd88

  • SHA512

    8f8313e0ad3453e4a8eb949a1da3e11f56a3c9c185f3620dee293f286221205e1d0385261c472d27e55176ff407128ea07b896c56d672e267cae3c649d750540

  • SSDEEP

    393216:nqPnLFXlrPmQ8DOETgsvfGxgU/bwsvE2LfADjq:qPLFXNOQhEwXjk8z

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • polarbsttool.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc