General

  • Target

    Celex_V2.1.0_2.rar

  • Size

    15.3MB

  • MD5

    ad7b9a887dc5ca6e0d2b97f2e2f52f19

  • SHA1

    be38c41b1d9ac61c7e86f5a73c3b12581f1f0f2d

  • SHA256

    8e66efd8f3307702df1ca24e0394afda327dac5e248400e181aefcee074d97c1

  • SHA512

    feaf8402817fb53e62bab01e4407978f04d82439f5a50c47f3381487042cd1d16d7fceaab8cc8eae5336da1b31f66014aaf20a39af712b67013b1982bfb551f9

  • SSDEEP

    393216:0i5V+QZAOUA+uWuVCbzO8QQIJPqWIwHsj0WKM3vIhOZh:0iuruMUQIJiWIssjvKYQqh

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Celex_V2.1.0_2.rar
    .rar
  • Celex V2.1.0.exe
    .exe windows:5 windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc