empyrean-grabber.zip
- SHA256 39be4e8d2228461b42ca590d1da8904ff50e3bb1e4b9bb3208375adc29fc1073
General
- Target empyrean-grabber.zip
- Size 448KB
- Sample260727-qfrdratakc
- SHA256 39be4e8d2228461b42ca590d1da8904ff50e3bb1e4b9bb3208375adc29fc1073
- MD5 41a2cc8d16f20760c63686f838f0f943
- SHA1 e0c2b78fa530231a128acfcdb1f58664b6e51018
- SHA512 750369601ce32a9b9ca232af495dfde4b11b83d118e2a423a631010f0149e7b97d32df243f2b4027e526bc0c5ffe0a89177672cc5b145135512770828f69fe16
- SSDEEP 12288:Uis5lzKZRAoNZGeaVK7o9kKf+0LkvxRN0Hm8zWODYbZP:Uis5QRtZGeQi0IvLODYbZP
- TLSH T119A4233359610A34E51B1C3C5F6E43E8FCF3C577AA62BDA708AD9AB2D904152BF12129
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
File Explorer
-
empyrean-grabber.zip.zip 448KB
-
.editorconfig158B
-
.github/ISSUE_TEMPLATE/bug_report.md548B
-
.github/ISSUE_TEMPLATE/feature_request.md481B
-
.gitignore40B
-
LICENSE.md1KB
-
README.md3KB
-
build.bat14B
-
builder/util/build.py2KB
-
builder/util/config.py2KB
-
builder/util/makeenv.py616B
-
builder/util/obfuscate.py1KB
-
builder/util/writeconfig.py555B
-
img/banner.png.png 56KB
-
img/bu0.png.png 106KB
-
img/em0.png.png 48KB
-
img/em1.png.png 73KB
-
img/em2.png.png 99KB
-
img/em3.png.png 54KB
-
img/footer.png.png 39KB
-
main.py2KB
-
src/components/antidebug.py11KB
-
src/components/injection.py2KB
-
src/components/startup.py1KB
-
src/components/systeminfo.py6KB
-
src/config.py192B
-
src/main.py1KB
.editorconfig
- SHA256 af6d40deee9e0a2bf5e5bd9e71f857dcdb5c81d5b453425da0616f202b4c679b
- MD5 34972a6636960201f371fde437feeb61
- SHA1 4c1cac0da96766a730ca654ac96b756489e7125b
- SHA512 952e3af7b03fa3f68e4cc18e77c3c7a7795c86a292fa1e0800dc2372e2111107324287f7d95fbae5e1d312d8809e1d84fcbbed9ed2ea1d96890b93f5775f3211
- TLSH T1F9C02B3124C21D7C533A733324022BB72822FA29051F21DCF31100383240014F24F9E9
- MD5 SHA1 SHA512 TLSH
.github/ISSUE_TEMPLATE/bug_report.md
- SHA256 4bce8f89c6269d623ee242f9f2333bb03ac378e133382f970b31ea978683ea68
- MD5 321354397b40eaca25d42e5fc272b833
- SHA1 7257392870471914fee8c0d9ffb79ea644de854a
- SHA512 6a60331a0527658f0c5a1fafea17b48376af66eb14ab0791c6462ca8343357c5441dcb3762124a26255cc2eda8176fef1a3815807921f173981ef3880b3ab9c9
- TLSH T1B0F020B0CC1BB222617911079FB2C6FABE22671404D8C0204880E22813CF3DC9F7B6C0
- MD5 SHA1 SHA512 TLSH
.github/ISSUE_TEMPLATE/feature_request.md
- SHA256 bd45fd9fbddab45ad4de963a3c71a7327b05f94f4bfafb7042224d53c568af73
- MD5 0bce4d73d7c3d57f7d2f6a08a0b1cd76
- SHA1 251f8d66cfbefce71e3a167c0e72f3fbcc054eeb
- SHA512 251fe8989563a17d35bee8161f72ddc6a9de569a568fd2fcf7bb650297d85d56aa4d50f2a5fab64c100ca2ee925e14eed6de8d57574715774ba43d2826d48293
- TLSH T150F0D457DDB56103969702805DF6DE5D7A26A5901614C0259180D2BC33DB75CC77B8D4
- MD5 SHA1 SHA512 TLSH
.gitignore
- SHA256 40e5ba57447ba9d64413af1e81eeeb1a58a6fa09c66d7f5d680842e2eaedccc7
- MD5 99548129ede134f3b093f2632c31e3c6
- SHA1 bf7104b3ab481e8a8ce6c53dfa4d7fb50b9787f6
- SHA512 f1dff38d6ea7a9dc4fe1273a2379c535a6d6b5d209d185be6234690be1368b222ca1e1434ff7c34f08685cd38cabe0ce0918e7c43bef6550f7e0ce60384d74f2
- MD5 SHA1 SHA512
LICENSE.md
- SHA256 1e5a9cd584cf92ffdc1b1143804fce7104ad5c5eb71f0bbb1d58452286a1e1a4
- MD5 258fbe6a6a66d92f8aef944eeaa547df
- SHA1 a57aa2dace7a2e9e4f997a11cd5cde2a51284218
- SHA512 a491cd4295e1d1209b2babd1da276233df4718f490f0d99f8e4a2ae6c5c7ef0db707e47bfb997a72d7872cfcc54cb9407998444401bdecabef8127b9caf92f88
- TLSH T12411B51E72500776189B13A05578ACC9F23BB25F7E5F2A84246DF341233A06CD5FF840
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 b6f4fec4a7f4064d18e9d822adf8757e91d1b9a0c12b2238fdd2c7ce00ef7211
- MD5 53704f8517dffee500f66a2f8d2e41c2
- SHA1 857d572ac536f82815a62b72595b7018e01002ba
- SHA512 018a9cc2391b8e720b80ca1083dc8886f34c9843cb572018413cfbdf5c61e6b3dc126837aec64d318d0f84d0042d84230c24765957a757d0a62adb2b11838760
- TLSH T1C261FF6A286D081EC2B38090CDE5B79EF231354FC2E66109B9DC1596FF28996897318D
- MD5 SHA1 SHA512 TLSH
build.bat
- SHA256 89b15dd343075c7271ec08f848803709a915526e81831af0a9df53577b5155b5
- MD5 92a6f2af2e2bf7d6e64b7821f5400d1c
- SHA1 ee3e35bf31da9e6616c1c6a663fd19b4d745a279
- SHA512 57ebb186b961d2e73bfe554f247b53558cd358bba5716578c355a85caf783087495ca15e981bed2c049e4485bb3d5edf413d90b0e16f68ba95bbdc7f26f5b29f
- MD5 SHA1 SHA512
builder/util/build.py
- SHA256 ae2d7a498db4f1ea8d4cf1f71a9a60e0379a8b6e287d2c8b7cd2262f45b2d88c
- MD5 b972c3bd98189fef3649132428a6b5d5
- SHA1 2f9a0e3bb364be7614062a716e97065df9d091c3
- SHA512 b9e9281168c684a8136f299e50293d2d0c0fc92c70ee482a7ed27f1340627c628c0347ab36ee33c72ace95595d2111ee103fbb1ead1e0dbe55a3e85dd2f644f8
- TLSH T167411C77C603583072B34A0B9D9B0493D20547335F8654627DBE28C84F33663C3A2A6E
- MD5 SHA1 SHA512 TLSH
builder/util/config.py
- SHA256 b5f7ff2bfd9a7fc444076ac74dc7034d9d366152f4fb288eab481597bbf54672
- MD5 083bc8cc27286e50c08f0f53876f48a8
- SHA1 2a1d0ade3e5b4abba267b9ccfeb2fee681a7f032
- SHA512 832bff211d5fff703c1cfe5b54777e5707c4e9703499edfdaa25865bacb7504bdfe41814033e6269537d692e0c53ee58f6c80184697564adf6969931370f50ca
- TLSH T1CD416E23EC587D3709764562B1985A42F61447DF2208181B3EBC107C2FBBD11A0CAF9D
- MD5 SHA1 SHA512 TLSH
builder/util/makeenv.py
- SHA256 210579537257392e13074d978b255c0e2313d9bd089c6e6635adbc0109a90789
- MD5 9636255856ad526bbc00457b24373c54
- SHA1 6fba0fb49e9698f9e8a818dcd02f236f4b07a428
- SHA512 d29b68a830bbe0e8190243df51a88e883da75cacd5b9824ec98f63c34e07582b49d5281ee89569d00520b0e567eaeccefef60e223cde8de2b06a29ac710b23d9
- TLSH T138F0C8A7CE1EE95150375D051D2655C3C22987A35EEE14157CBC29844F33653C390E9D
- MD5 SHA1 SHA512 TLSH
builder/util/obfuscate.py
- SHA256 c9091f59845b3201e05e4294dd14c54ba77ba3e679998fb4b37ea204544a4650
- MD5 b5854b3148f23dbb9355d3a30e3315a8
- SHA1 e4273fcdd3948fa75960af037bc9a916705c553c
- SHA512 1179ac8391e9ec93c23704eaf3c630ce6fcd3dff5d372449addb7639e4bebb05328b1213b32ce99b37b0ec046b23488d9e0073b7de3129005c57d0056d49b126
- TLSH T1E831D082CC0A2CA706B6D619A671A03BDE1CD7AB865B50133DFC212C2F3972192C1D9C
- MD5 SHA1 SHA512 TLSH
builder/util/writeconfig.py
- SHA256 eb1007f66f1c665f2a05156e78df47b7386736c9cdc272dbcc114ab3291029f7
- MD5 2b14c9284e5337eb2af6359827b523e9
- SHA1 74f35cae83f8830c181240d945c94c162160c331
- SHA512 264399eb65d810e47bdd85a4cea943ab06937f44cf6510b71f4202cc745d49b3087b369a64d34e9db5e16365defbfd8a45336b0fbd0dba1d3e1972093be94dec
- TLSH T14BF024A3CC4D1E2710BBCC11E997C06ADE0487EBCA4E54013CBC34484B3962AC2D2F98
- MD5 SHA1 SHA512 TLSH
img/banner.png
- SHA256 3aeb09bf487d96bd5f273c66ba5eff9f38aab0caa91fd7d5b9c72e624ba8e45a
- MD5 05bc1a72bba6d3a1e947889816bc5af9
- SHA1 5e79b6679d3879c712f6ffdd71c2765ac35657cc
- SHA512 4bd44d6b3fd386c053cc3df48d9753224c66211c09a748c82760e53440084abf59d64a588e2606cff38dd6d722777f54fdd0329a34c5145b5304903da4560edc
- SSDEEP 1536:d4N6eeJvm56/WWvRUj6xXvqU9tw7o6666666666666666m:d4NXeJjtRUWRJ9tw866666666666666E
- TLSH T19943AF06DB40217B319D25107A27288B91366977B550EE0A0BD374BF6F03FB5EC74EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
img/bu0.png
- SHA256 fc60ae1bce31506ceb8d352a2837124f0348b69a832e9fe7c028776cb9ea3038
- MD5 75a957e21729fded930593afcac08bbc
- SHA1 97361e7597e976800083f9d85056ca4eeadb0fb8
- SHA512 68a61779e214013d2408d0a45864e1706ba0dacafcc63a49c56ffbdcb4d99467776e2ff94567fc3753940414f4cd8e290a1ef2daf0c8bbb8599d25b94c32113c
- SSDEEP 3072:qlTk64nSgeQVgTe5dh/uVGdwB6AWXBrf1lqE1t4q:68Sgeec6h/uVGdwB6jxzqEsq
- TLSH T101B30286DD369CBEFC5F9D34FB428A34712A0E20068671A776303F36AFA979D0395845
- MD5 SHA1 SHA512 SSDEEP TLSH
img/em0.png
- SHA256 4783a629fbbcc597aaea88afa8147aa285ee9273b1282e350753cf0cdc9a2ba3
- MD5 0f1bedcd0ae85f68fdb3e2d041bcea8a
- SHA1 553c7c1a933301790189bad120e4dd6f393ba768
- SHA512 85d3cda472591aa14669ba404837d0d7fa03e5b1e8ae877cf69eb4d903fba536528a058410e6d83aa1d32c461a57012b929092bada729ef820b2e4767d6fbde5
- SSDEEP 1536:VgssDNxJeaSA2U+WfPxLLzQbOl1biCVGWj:Ss4Nx5Sq+WRkbA1bikGWj
- TLSH T11D23E111E56AE6F8BC1E041A55486D3A9E290CE42C9CD99587BCD0BBDCC8B354E3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
img/em1.png
- SHA256 f3bc44f23f86648c8a2c686a88d70f65f403945cf40a679439abb4b0ec5500e9
- MD5 d558a83af8c6913f87cb82cdb5c2ea0d
- SHA1 e6d0e4f617273f902ca0a7398153519375816dd4
- SHA512 c0cf2c07e6a479b61b8fb33884dca271c19ce8ceec5114df51074cf4a16179bbb86be9024ab29e7381d94a84f646ae1e168ff9c76dead9f0124f3bc45603e55f
- SSDEEP 1536:MIE9qnfrfc2F52Ii1tBk/vCxVzpSIUhTHXSXg5t4Jh2Rg9w:MIQqg2F0HKCGnhTHXSMtehEg9w
- TLSH T14A73E020B8BD26FC026161CE7EEB61461A5A44A2F3D372EBE4EC522D1FD025C7D4A5C9
- MD5 SHA1 SHA512 SSDEEP TLSH
img/em2.png
- SHA256 66299c0c3bd727b4a291449fd62e822fe72e61efc9ab9e187dd90805c664df58
- MD5 044128768f6dd149fee0dd0c9907bb45
- SHA1 d5cdd34603c4484634de0579900d407fe8227dca
- SHA512 909f4aa394df8603bc9284b28b540e8ef3c8d20b0f149a81f32a47cfde6be10686beb24e4df768fc3a366616b2b53b781e4d7dfe4fee65b70a2213fddd731cf8
- SSDEEP 1536:E3xhsHb9YbG6c+x0Nev04zCzq7sg4qlGyPJaFWx4REQdRm6dQAQbNwWi7Wn18NZ9:E3QHbQNF01qDl7PQRxR+O7WnqNZ/ICl
- TLSH T1CBA30247D7D40DAC9E878C1B35DE586C20FF0014BEBB6F849E52BC46161E3EB94A2726
- MD5 SHA1 SHA512 SSDEEP TLSH
img/em3.png
- SHA256 bd1cf11afe2160405a36e2e7d4c4f2dafce9efe5ccb4dc96a7aadce6d6e5be80
- MD5 8350a5245117e54b3ba123e1e3140756
- SHA1 32dc8fdde2cc059c039262c28427ee61e8e5fd43
- SHA512 44c82ce5df65cc84f78ce6eff8bbfd05431fa6be34dab2e8342d12bf554c8b4717c2a6f0d6aa71bfbae8ae587bf91361e2e07373f54f9760062c7535045c811e
- SSDEEP 768:do43ADEpUreId9rmOa45hB6wMimFxP19D6QnE049zIEn8Mval3jChiRlQ66x4m:uopUbfrmk5hZMisxPjmQnE0eBJazQ5N
- TLSH T10043F1A6E24E5FD63887E528B7E5C300782EEC34184009F84B9178BDDD767AE3A15E5C
- MD5 SHA1 SHA512 SSDEEP TLSH
img/footer.png
- SHA256 372a5a48bc48ec8589372acfb90f930418b460577958d3af2a2912ecfaeaf405
- MD5 a7d50223d0dedc64c4722572beeddc1a
- SHA1 d5826940d2afeac8da8deeec303d1418f8b9dd0e
- SHA512 e4b48e9474b593c00a8881040c1fbbe5609e982ceb7e8063b5bf021637c6b63a9f7c73ea0e97ee365dfaac76afa96e20cdd8b198c3bf966bdb47db97331df564
- SSDEEP 768:mNJXmelU5mHSSHDtC/xgzzlQ/4F8PPgKFcFKth0O0/PXVJz6:delUo7j4Jpc8hMAh0O0HX7O
- TLSH T1BC038C64D3A499B3BA114929B885B863A8D06C773A56CC4842C7B41F376BFF40C74DDB
- MD5 SHA1 SHA512 SSDEEP TLSH
main.py
- SHA256 221bad58e8df9d2f13ff6a9c50e84e0724a336e538ad22d3ab8ac26464684ff2
- MD5 3a5351abc6478f1929cb3680c532d407
- SHA1 d69a3026dc6eed7eeafda5276d82e6ed14a86350
- SHA512 13bcf218f282f285a151cd2acdbfcfb8cc1ed9b5dd5e31070a45d27fcd5f9bd2a19437e9d4cc3395dd9f8525656d2db5674fc822b5a108d018fa38afb1caa322
- TLSH T18D5162574A6F9C5289F15880D833C2A8EB7123437F702119335C733D1FBA430E8AA55D
- MD5 SHA1 SHA512 TLSH
-
Detects Empyrean stealer
src/components/antidebug.py
- SHA256 92e1b4427e17cc7ffcce8f62a3bba16455110086314577fa76ba87804dc6803c
- MD5 47ae6ac6b52d97d6b952b140e82ff9cf
- SHA1 eebba9b7e4dd198d4050e597bab281b87d5785da
- SHA512 97bba85c42ba15f48f2c21843bbccc4af7a3b08bd93d44db5361458900c9e3a3d0607cff38e7b078883ffc6d8fad0dcb9a422015f1165442bd7ddeaa32707e5a
- SSDEEP 192:0PRZOKV83Gsn8ZBwh9JYmypzrKU8zrPsR0TtsBWaOJjd5vpV5M7/K/m:0ZTd+nJYJzrn+rgeeWaOJjd5vpVCH
- TLSH T19C32A56006BB5952D2254F518523781FFF28E586C6DA6288385E77E06F3E4CB87E8F13
- MD5 SHA1 SHA512 SSDEEP TLSH
src/components/injection.py
- SHA256 9933b323c85c9bf087367660bacf9e5bf46c5e869688af46922560c9b710d9da
- MD5 deaf00b5fa1e87d383d67653e7f9e632
- SHA1 615abf76bcfbaf3249e65f5d764cbc8a9c457317
- SHA512 255fc671802131cfa7bc498a0877116db35fd5b6380b630ccfda37f282956d8a1a6f65dd5414e84659970fa7f461c45ab1b7dedabef8f11beca2f121f8260e8a
- TLSH T19F410F190C79246002BDA85D264AB583E7DE77C7A31E21133D3C91886FF4121A1E8FBE
- MD5 SHA1 SHA512 TLSH
src/components/startup.py
- SHA256 1c4fb55c0625e037d90c52a47b7dc46f4fd7c400464834e22e6871e00176dc5e
- MD5 0fede8d83b25bf76cb24df5fafc68bbe
- SHA1 3074408484a65ce9e72bd4b9ad6dc774029031f1
- SHA512 74b01d93691bfe176ba6f6d3e8e0827fa4b520c044f05289ee20ee8712eb59f1c13e1b69bed45884fe748366fb28d2000e2d8cafd45512dc9cc932ddec8b6cdc
- TLSH T13921CA62CC0BE23292BD3D282C44EC5BC78987937F29090AB87C84506F7E465C5A4EBD
- MD5 SHA1 SHA512 TLSH
src/components/systeminfo.py
- SHA256 e4aa53a74dbe1a23ddd6b678ef982cb1ce680e50385dba761f5e4971944abf8d
- MD5 dacc6629a93a629f2e5e8dd6e6ac8752
- SHA1 f0b8436cf7d2e9fcc3d84da50955b82b9817eef4
- SHA512 5ba2c0a24cb45f306bcc5d91be69f5e2ca90bccae0988874491a5e6018858e0a90f5c5b292365f6662c2f812d156e8dac71297afe395ec813a28a75c577c7e2a
- SSDEEP 96:o62a5Q8kjqXmBHyCOMHdpvlGa4sVV2iHhhrqZb+zadcTP9eTnSIf:PQRyGTka/T2oOZazaaL9erj
- TLSH T1E3E187B7AE1D980112B2A11BBC21E14BEBD42217562510A7BEBC52746F39422F3E5ACD
- MD5 SHA1 SHA512 SSDEEP TLSH
src/config.py
- SHA256 70773b420265012d9e1cb9d9bc8a83d8a4ec055d3907bd85102cce4a1853abac
- MD5 36b6f6034baef719be778b89b1226a6e
- SHA1 f02c63ff4ead4a66e375ae8145d409537b302d78
- SHA512 67e3164601de145a4ee2888a1772aa8a12cfcc8a2edc995861fd316ab187d9ae3cb0ee36a9094fdb79db8c5d907f50b9dfe88828590285f02c7fd65b5cb6e129
- TLSH T126C0CA00E94348FE05B2491FC22A0104D2842347B042400EF9FE802A2FB882A7222F7E
- MD5 SHA1 SHA512 TLSH
src/main.py
- SHA256 ddfbeb221f72eaa4c8e2e4dcdf604307dcfd0d9168c0837a10110cd809f82060
- MD5 db5386b5f9edfc7500d0508fc49a9a59
- SHA1 4c79b803e2090d86dd38c7671b1a9b5322b3cf3a
- SHA512 a5c6435242930285e41e98e7284fdb0708f654b849e697bd10e8ad12631d5e83e647b775a1bf6d61b9a2958d4969c475055ff3071affcefceed3234b92d69634
- TLSH T16721892B6D1FA016C5B48048F276D959F27703434F07900776BEA3282FB662CC69A55E
- MD5 SHA1 SHA512 TLSH
-
Detects Empyrean stealer