General

  • Target

    Ripple_Tweaking_utility.exe

  • Size

    17.6MB

  • MD5

    09bbf6c9f186f844feda5b0ea6be4236

  • SHA1

    0cdc3966c6197455cd7b473b2c38b916443f20ea

  • SHA256

    1d0e737509249f21cc3d3760d06c7c06595ff1d07cc8311941d64927b80a256f

  • SHA512

    2e71420eeae8507342e54c539e3d34d557fc8bf91c73d4c727e9f9e23163037c4269c0c1ddc6124882611cde6439af9f98cbb38af48c6cd4445c1af8425efa06

  • SSDEEP

    393216:qqPnLFXlr7gQpDOETgsvfGXgrmg0vEsAUILkY:/PLFXNEQoEiOzye

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ripple_Tweaking_utility.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc