General

  • Target

    UserInfoUpdatedexe_JC.exe

  • Size

    19.9MB

  • MD5

    71e21f6e321d61573d538be965bea00a

  • SHA1

    55b2e23c4aa527091b052a6b4a06c7d122fbf3d2

  • SHA256

    46019f2c2ef63599a9f66e83e6d0e76cf58d4037c0678bb689e93e77b2c45296

  • SHA512

    b2634a1180f2d6759e74e0acc777a0abf7d81cfeaf2bac64c90017664ab4f899179f20996ea01c3d31d536678ab997a4316204e4880e4498b6d78cf0ecd86b7b

  • SSDEEP

    393216:UQtsT4Hr7M5li8k3meCcGfd0NYMAWh8k/clAfhGh:UQtscL7M5lDaY5F0NYoha7

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • UserInfoUpdatedexe_JC.exe
    .exe windows:5 windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc