General

  • Target

    Creal.exe

  • Size

    9.6MB

  • MD5

    f9a351774063b9588b851c747976610c

  • SHA1

    f6a2796de06c256bb04dcf43a507eba411deb0e7

  • SHA256

    dff17a4e95259137e540caa77e05b7443b35672b46d55b19774eb14b73b69155

  • SHA512

    890c041d5f7e32625fa3f8ca79299b7da8116373f104fe335e956dfb4b402778930e88606e5e47a894ee235a64b16e50099456969132f9eef665e45783781813

  • SSDEEP

    196608:NRZ3ExDwGcsAgectcGfcY3gtywIf7E5MsWSESX5Hi+:x3Exk3meWcGfdlYM0XB

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc