Resubmissions

11-12-2023 22:45

231211-2pw65sbhf4 10

11-12-2023 18:52

231211-xh9rfaegfl 10

General

  • Target

    start_game.exe

  • Size

    17.5MB

  • MD5

    5b1de1b723459f21fc641c5c29252fb2

  • SHA1

    10f1cbb30ad8707be8aa7236aeccab8efd241fdd

  • SHA256

    7df4ab708f17fe3c077713700354a11a7c725071d04b365dd533096390c9f8e2

  • SHA512

    eb6ce6ff00ecf18317f6fb8f14d6bee2fe7052fac10fe6c71320d17cb1a88e9fc876888337359ba30f8bbe7a19a5fa37ee09658f9b9b9d404f1df3a1aacdadd8

  • SSDEEP

    393216:UiIE7YoPQts+yVxTaUX47d4atcnskWlzGCkdjBBpe:t7rPQts+yVlaUI7d4atksy9BP

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • start_game.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc