General

  • Target

    Discord_Setup.exe

  • Size

    19.4MB

  • MD5

    ea2617c7bb3bda162406342abc7af019

  • SHA1

    c45e8c1086140eab8e62194998532880fd073724

  • SHA256

    b667f67f29372ab475d266d8e5397f24e817e0219c8c6ce8d3f216c4daf6f07b

  • SHA512

    554ab912202efbbc35fed6dc02cc3116361aa65faa85dea34ace64cb38b8aadc1e24145c8f2426c9d8f69ee89b518d9b131adb73314f1954f7a63524ac0346a9

  • SSDEEP

    393216:cQtsrr7M5livQETSrvJQnqOqK8nI7zdCyd06:cQtsX7M5lmQEWrhQ7Hi

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Discord_Setup.exe
    .exe windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc