General

  • Target

    RatCheck.exe

  • Size

    17.8MB

  • MD5

    ff8ba335077d6e03224ab141c374b4a1

  • SHA1

    e769e6147bd1cb37bb7d536542a7731c064c3dc9

  • SHA256

    16fef2e9d0a75dc1557bc6195719cbc69b31571725bd6acbefa88e766aeea1d1

  • SHA512

    2617da365acf42f70d5ae0847abe1a2f05e0f0f4892c3f349cfd9e86776c97e231d3c387bcc59e16e9473bc2a57dd9c65f06ce2e1cad263c5b315faed2589bcd

  • SSDEEP

    393216:sqPnLFXlrPmQ8DOETgsvfGFigPMyF/QvENQC6tFaF6q:dPLFXNOQhEhaTJeHFK

Score
10/10

Malware Config

Signatures

  • Detects Empyrean stealer 1 IoCs
  • Empyrean family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RatCheck.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • main.pyc