General

  • Target

    zimmerlock.exe

  • Size

    17.9MB

  • MD5

    3fce96a137b8af1a525db00d4d34abff

  • SHA1

    12fe937d6af286342b11a2a6fde7729246bc296a

  • SHA256

    7bf55b2f2a943c3be09e0f1683b9f64bca013c777a9fbfd236af23607f4b9f43

  • SHA512

    1a8ae30d9e22bdfd908a7ba67b506889218fcc8da698fd37ef4e0d13f8846dfc8e1edce76729c731f0c603394635bdfe2ab1a4a528aa18250f61c321380492ae

  • SSDEEP

    393216:ZqPnLFXlrzQMDOETgsvfGnhgh8XRvEqen7zRxNq:QPLFXNzQRE6K8W9zw

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zimmerlock.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc