General

  • Target

    Adamx_Tweaking_Utility_Version_10.04.23.exe

  • Size

    14.7MB

  • MD5

    007c895e193a8d123836c1a2e065ce55

  • SHA1

    9698bf6d00ba857ae3509b146f5679a5f3f063a1

  • SHA256

    2573e100d0ada48bd0cd45122b6b519579113db03ddbdc5c14a8f4b828d40285

  • SHA512

    caf3526f85f6217377c99a385773ee31de65e122f0e64508ec5309fdbee80645b22625eb7ba443f1944f5f2e006aa479d233e21d9a9041f199e7333a9a516627

  • SSDEEP

    393216:QJBtXiIE7YoPQJidQuslSq99oWOv+9fg+bUb7Vf:QJBts7rPQwdQuSDorvSY+bWV

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Adamx_Tweaking_Utility_Version_10.04.23.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc