General

  • Target

    c358eeda046271b9301c0036ad706a3fdb8d38c7c87d9d50108aa2fa4e301512_JC.exe

  • Size

    10.7MB

  • MD5

    58c1aa7d18894e2762d97f8f2997662d

  • SHA1

    07d9c181bb0e00b7fd2dfc3806941ff2a8daf4ac

  • SHA256

    c358eeda046271b9301c0036ad706a3fdb8d38c7c87d9d50108aa2fa4e301512

  • SHA512

    53200e4a4468fafa9dffbfdee8c96989305e4478e1062d4ae4b669f71744e7f937a526e6b1776e74c156dbe62ce74a55a39ee76d2738b7230f4aa616df8a51ea

  • SSDEEP

    196608:TAHiIE7SRpo8fy7IudQmRJ8dA6lSuqaycBIGpEKo6hTOv+QKfrOs6Telo49vLLj/:UiIE7YofDdQuslSq9foWOv+9frOna59j

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c358eeda046271b9301c0036ad706a3fdb8d38c7c87d9d50108aa2fa4e301512_JC.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc