General

  • Target

    main.exe.zip

  • Size

    64.7MB

  • MD5

    1edcbc6a314843886194d651bd6464fc

  • SHA1

    0faadc6e04a72935325edc36cd6cc50e446cf65c

  • SHA256

    a5ea085391291a4adc8c8af69d9e99cd8eb9367690b6df46db7a3a01311ec634

  • SHA512

    a22015014505e2f80c7ed8b41ebc74adc546ea74786daa6135bd54095fe6ed06e4ac0117180980e9b340f4f380d636e4892e1b800a91913df2901ff99064737d

  • SSDEEP

    1572864:9bdjA+DMyZ3pnX1hY+bdjA+DMyZ3pRNf65gtlam1klp1:zEdk3j+qEdk3dqNmyl7

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 3 IoCs
  • Empyrean family
  • Detects Pyinstaller 4 IoCs
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • main.exe.zip
    .zip
  • all/other/Ransomware-PoC-master/bin/main/main.exe
    .exe windows:5 windows x64 arch:x64

    58053a2a3020fdc7713b576ad93bf7bd


    Headers

    Imports

    Sections

  • main.pyc
  • discord/main.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • discord/tools/main.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • main.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc