General

  • Target

    DOXER IL.exe

  • Size

    24.1MB

  • MD5

    cfcbce8425ea1c0b8c461633d08d461c

  • SHA1

    aa38f2361af059991318dc95a947e48fd47a0f11

  • SHA256

    eac49939feecef59091b7c5e02d7e03b4226af94699e998e9f8da2408b5698ba

  • SHA512

    1bc8a882965b45df3bcafd80b5c87348f194c2d4164a152306d7ccbe7aa20f2e0f97ecdd4931615b5b0e26f7588f8e224a975fd920995a64c27b3bef56fb0147

  • SSDEEP

    393216:rqPnLFXlrYMYoDQ9U06hsDOETgsvcGvVgNq+pMpDfnLt0k8Hg80wSs:+PLFXNYNoDQ9+hxE70SRh+A83

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DOXER IL.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc