General

  • Target

    exhisa .exe

  • Size

    13.9MB

  • MD5

    3488d90bb570a7b112810e53b6ddcdca

  • SHA1

    29ba0d7a8c4c43bb9a5579433052e4f3fe347bdf

  • SHA256

    35a2cc0635e0cde9cb882f2c24bb28c28b5b41e2c372a4c83b5143e05ecdc77a

  • SHA512

    8572764ee11b6b3064ebae00960683b29b717a85c137bc8feff3126e6f5bf47b6fa6641cd8eb21b13e2a7ce0761582035b8d0740084fcda5825e09922d40d12c

  • SSDEEP

    196608:/nXZAlqpb7KX/x1HhyehNJm3AqdKDnO8NpkSgsAGKaR2Fdmytu9mEypXblepZ6sV:PZAlqYXJBb/m3pgDOEkSgsvauQBrA/

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • exhisa .exe
    .exe windows:5 windows x64 arch:x64

    Password: 1312

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • main.pyc