General

  • Target

    tri.rar

  • Size

    17.5MB

  • MD5

    48fd699e9cba54f5c9fb09a3d362aedf

  • SHA1

    f130049b001902d7fcad58f13d6b47f0d055acca

  • SHA256

    4ee66020bf8fd5606f1fa1835a6c2328aab1556035e44a2de60b87c8f8571375

  • SHA512

    7e80794fb6d765ef42236c4fa16a53f817df2a163e944a31513344c1d74379a1ca5df02eafd188294c65b39c47db7d748c30de58ae95693bf161216bcb67e6a8

  • SSDEEP

    393216:1vAMSV/Hy1IrjMr8wyVQvm21KpM1pfWbQVjxm3rYR:1oPyOkwBCpK6WsVtm3rC

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tri.rar
    .rar
  • Lunar spoofer.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc
  • read me.txt
  • serial_checker.bat