General

  • Target

    NetWare.exe

  • Size

    14.3MB

  • MD5

    ab28fea229b340c8631ec6f4cb655a18

  • SHA1

    0e33732bcb4d65fc10d3acff749d95cc52f4e5d8

  • SHA256

    4411647a0bae30334bbca683ec1c1acf1488711479fdd54516840780f8e08c62

  • SHA512

    0b44fe554a89fec41c1503b53d045bd9a0ff763ddbbb057f5cb028732d3555a6865be9fc1108ff30a78576c298095dc3aa256f254de1bc7560ab62e55ddb2ff3

  • SSDEEP

    393216:i9iIE7YoPQMidQuslSq99oWOv+9fgJ135R2M+7S:T7rPQ3dQuSDorvSYJB5kj7

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NetWare.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc