General

  • Target

    c6197da9df4ce2c7d9fa53cb16934803d51e8afedaff4df409a07d4a06b475e0

  • Size

    5.9MB

  • MD5

    60e4f07c6e16c49aa728681fe0f8af13

  • SHA1

    feb7c10e8de91e8cfd605d723021d39375ed0265

  • SHA256

    c6197da9df4ce2c7d9fa53cb16934803d51e8afedaff4df409a07d4a06b475e0

  • SHA512

    8465b4ba4eb8a215533887211c44fc0272ce7f83f2b99768d92062349ee6140b31c2728369270868611268ed3f2bc74f4a1e63f33e7df3d1106749fd321f667b

  • SSDEEP

    98304:wh8n8jWdAB6nNpYo8pxOsAm9imo2oNSI5gToze4ghM0Xy9pUym1yfU70zU5uZUpc:why8KdbnnYjHimOpze4My9uNANfxR

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6197da9df4ce2c7d9fa53cb16934803d51e8afedaff4df409a07d4a06b475e0
    .exe windows:5 windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • Creal.pyc