General

  • Target

    Phoenix-Nuker.exe

  • Size

    17.9MB

  • MD5

    bfefa239c8a99e0f3cd1e9cfeea7ef16

  • SHA1

    62c36544d88a15ac26de901a35e39874472638c5

  • SHA256

    ad764db8191b3cd576f25a8be8a028df7ee1fcd477c5c583f4ad7d515cbc0511

  • SHA512

    d36042a744bdafc527021662fa184086610a5292ae69bb35dda0c11812340fdf6b73b7eb5445bf2375928b6f74131e1b7cf18de9f502d4f8a12afb3b88a5889e

  • SSDEEP

    393216:nqPnLFXlrHQpDOETgsvfGmkgPAMYvNZX2MqY19:qPLFXNHQoE4C2E

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Phoenix-Nuker.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc