General

  • Target

    Creal.exe

  • Size

    18.1MB

  • MD5

    22433d7243099e8e5c33eb4b915099cd

  • SHA1

    089f409b9da25acf55b94fef4e19535529ba872d

  • SHA256

    38da212dcc6fe50023ce87fc64067129766f509c664a354994690e4a1f1dc395

  • SHA512

    954e8bbc8088ed745b8a15a7c4683faf6848886970ffb46d26f8d3563e9c2602cd40b86b83f1a489db69aa60d42da96c45642d1ad1938cf15b39b84ff72edca6

  • SSDEEP

    393216:EiIE7YoPQtsTTGRk3meBcGfd0vYM0lkWR6oCvdSsu:d7rPQts/GRaT5F0vYFlHx

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc