General

  • Target

    Securaforgeinjector.exe

  • Size

    9.6MB

  • MD5

    be7e0c1777e27f6301a65b3820d2a9ae

  • SHA1

    5ea935c927c0f18cdde2328ae709320a30f96512

  • SHA256

    7e2154a729a258a1dd07e7157159d38dbbabd2da287e45e19b8d9aad276146a6

  • SHA512

    f825173932f905a8b569d701d24aaa6f9c558895e8bcbd1ad51de1d078cfc744b3f418c537374ef42bbf2910d132575f50a42a6228daa44933220163cf419a7c

  • SSDEEP

    196608:DLZ3ExDwGcsAgectcGfcY3gtywIf7E5MsWSESX5Hi+:h3Exk3meWcGfdlYM0XB

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Securaforgeinjector.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc