General

  • Target

    frameskip.exe

  • Size

    17.9MB

  • MD5

    b2bd3919426bb4bf8b8371954fa2ba6d

  • SHA1

    991d1093900c1b1e3baa1ff2c4b99f5ede7c7ddd

  • SHA256

    62c13043ea5275fa54a2f64b5874a229d2ea75d62664426d5fc6116f79e88680

  • SHA512

    893a49bd6b3b1b6b481da5176cab17163dd98c96a4d2f8a5e61c4f0fe29582c778f46af3e19cdb53d0f77e3aecc4462bb428f1461519d322d269b38ba064f21f

  • SSDEEP

    393216:6qPnLFXlrNQPDOETgsvfGkgoiHvEd8miF/Wq:PPLFXNNQ6E5lisPi5

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • frameskip.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc