Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    RoseMulti-Tool.exe

  • Size

    14.0MB

  • MD5

    1e4236c208277a1797466baad30729bc

  • SHA1

    0a03475a1eddfd424dae711816d7904e06de500c

  • SHA256

    33656e9306127c691cf3abdf3593a6c9e8c9082ebc252dcbe13430e6e6f89181

  • SHA512

    19098b3d50fb9080cedfa90b2c4ceb9c2ffb7cc53e7dff872a6d704aa3ccd3dcb7282daffa71e493ec4606a4af44e1614c8002f785e7452cd7cab87352f828a6

  • SSDEEP

    393216:QiIE7Yo9+4u2O/W+eGQRJ9jo7BGO1GRY/dt1WomY:R7r9+R26W+e5RJ9MDpmY

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RoseMulti-Tool.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc