General

  • Target

    Securaforge.exe

  • Size

    18.0MB

  • MD5

    8519507c9095b4e778fd4e172e335389

  • SHA1

    5522f03480d26475582d563b5057391f0bb5a5be

  • SHA256

    a08ba37228a9fecb7c5b461a2a748e241eea551a72ae09604712504716079481

  • SHA512

    32e3c513412869493de1ae99288ece50a3d65921452615c97d41bf9f0d3ce18df40db059244da2928f2ef40c5a8c7731fc3d39d527a187b94e7e44d06d2289d3

  • SSDEEP

    393216:avkMgCw07+N+CQ5lUHiIE7YodVExk3meWcGfdlYM/kB7:awLKlUc7rdWag5FlYy

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Securaforge.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Securaforge.pyc