General

  • Target

    Securaforge.exe

  • Size

    15.9MB

  • MD5

    b4cae6d94d9cefb08bc69e287249a3ff

  • SHA1

    2e3d986218a2485b9bd6131a6ede999bce1a7af4

  • SHA256

    75c81475762e6cb4bfef1119d3708076e366045c17bb7a5e325e27aa429791d1

  • SHA512

    7a171a85978f71a94f162e53f948fdcc6df5812f887955a6c594bb9adaeb4326af4e8b36689b593ec78accb5a8435904ef86f7befa529c1b595a1ec18714174a

  • SSDEEP

    393216:8jKZYdn/Fi+hhOG/rQxoF/1iIE7YodVExk3meWcGfdlYM/kB7:BZk/FJhQGE25a7rdWag5FlYy

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Securaforge.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Securaforge.pyc