General

  • Target

    RC7_cracked.exe

  • Size

    14.3MB

  • MD5

    579283ef8b916d0f52d60ae0a762374d

  • SHA1

    2a02a559aabd59234659bfd0565f3609bbe95ee7

  • SHA256

    873b1c0b0543b362897be1ccbbb04ed40065ab3aa380798d242b9854dab8c631

  • SHA512

    c39e1822dcc4fb501d03f406e0757d91795f8ebdd86cca430225cc4992f1049a583ae9dab3f6673fa734284ef91023eae731cf6b88940476d172e99ed672f79c

  • SSDEEP

    196608:8UJefPndQmRJ8dA6l10sKYu/PaQ+uqaycBIGpEqo6hTOv+QKfOJTDuEymOmhcY/m:DJYndQusl7Q+q9RoWOv+9fa2qquyYyn

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RC7_cracked.exe
    .exe windows:5 windows x64 arch:x64

    c5640c7a22008f949f9bc94a27623f95


    Headers

    Imports

    Sections

  • Creal.pyc