General

  • Target

    𝗟𝗘𝗩𝗜𝗔𝗧𝗛𝗔𝗡 𝗫.exe

  • Size

    10.5MB

  • MD5

    87afff19d39a109c3a15baae86f3bbc3

  • SHA1

    4054481f13a803a732066a1a02cb8ab787cf1bce

  • SHA256

    0482b05f04e2e927d22771dd5ee50c54a9809662f2d5267c703ffe0f21ee2a1a

  • SHA512

    dce189d8da04860dd593ff172de8d65dfdd1bac856df6129717115a6a132a168a566125850169d2343a9f990ed62ae476b0c0ad26125e5702cac59a6dfded4d6

  • SSDEEP

    196608:JALYiIE7SRpo8flzudQmRJ8dA6lSuqaycBIGpEKo6hTOv+QKfS4x+GlCFMuljA:iYiIE7YoxdQuslSq9DoWOv+9fS49CFM0

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 𝗟𝗘𝗩𝗜𝗔𝗧𝗛𝗔𝗡 𝗫.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc