General

  • Target

    fc27206c3753c3600098db372f5a218c2631b228bd7819b179ab0b2ceb54edfc

  • Size

    14.4MB

  • MD5

    2780f10ac51846fc57fca9c1fa0a95d6

  • SHA1

    1ac9c629f5ec95de2c6ecc3c91282d87a87cdfc1

  • SHA256

    fc27206c3753c3600098db372f5a218c2631b228bd7819b179ab0b2ceb54edfc

  • SHA512

    f167ba3f7ac3e0c527192055ea5cc83186391077ce1bfa2253af3cf5b5efe645d5ea4f4d79c1f21721e2b1a3f0986e0fe950678c8548e587ba12e7d396fbb018

  • SSDEEP

    393216:hu7L/sQMidQuslSq99oWOv+9fgEgjujn4Tq:hCL0Q3dQuSDorvSYEgjA4T

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fc27206c3753c3600098db372f5a218c2631b228bd7819b179ab0b2ceb54edfc
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc