General

  • Target

    ip_grabber_tool.exe

  • Size

    17.6MB

  • MD5

    7e98ebec945f9642f13cdf6f980d1d48

  • SHA1

    f4b3e9e29c92a976f04681f8c66fbed903b85e38

  • SHA256

    1c08f0e46ac63d1443dfbbb1221dbf8c6b367688b0ccd8b07b3d6e024173e843

  • SHA512

    5c8d9f05a74c102d8cf4e57503a9d3b1641b370297901204e7c486f80b9dd0d677b186049f17afc8917b2dee6095cd6c0c32a7ea0d58b2b96da31914c71bc77b

  • SSDEEP

    393216:7qPnLFXlr7gQpDOETgsvfG7grCENjkvEYxmD/L0:OPLFXNEQoEsO/jd5DD

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ip_grabber_tool.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc