General

  • Target

    Wentox_2.exe

  • Size

    14.5MB

  • MD5

    751de345e19bb3cb40cbfc134b23ff19

  • SHA1

    bf55048913da95a00f19b8c9e3f15aefb21bebde

  • SHA256

    32dcea8205246641ce6ee29230abd4bc1eced872d07c6dbdcdfb9594461638a0

  • SHA512

    94d0f7712945dab68977a79a379d7e20536ba2745da04e0db2e9a9364597390e62054119d6f0fdd9b82cc758ebf52a3a2dee21c94f0bf13cf817338de41e1cfd

  • SSDEEP

    393216:BiIE7YoPQPdQuslSq99oWOv+9fgK6nttAlg:u7rPQPdQuSDorvSYK6nkl

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Wentox_2.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc