General

  • Target

    269648184d5be37a1e7466075184b5998472db32d089a82a9fd4e00e7583103a

  • Size

    14.0MB

  • MD5

    ef050a6bf90a568746cbf4adb6f0f473

  • SHA1

    632c1aa4936e23da8fcabe9fcfebf261d8c452c8

  • SHA256

    269648184d5be37a1e7466075184b5998472db32d089a82a9fd4e00e7583103a

  • SHA512

    607363d5bb196ae284ebb305adc71acdb5496de6271816d7e5bae61682e165e80809a5d6c242750f429795cdab46e6b36b2a000d6abbd804d748a767e9062b61

  • SSDEEP

    393216:1QND9aeL2Vmd6m0JJVAzDak/iFznVgD0XyjDWkv:1Q99aeyVmdYDAvL+Jc0XQp

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 269648184d5be37a1e7466075184b5998472db32d089a82a9fd4e00e7583103a
    .exe windows:5 windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc