General

  • Target

    Creal (1).exe

  • Size

    6.7MB

  • MD5

    65c6da377fc59043b825b28976f14769

  • SHA1

    b16eb7530d7375bd2ee0a5dfe9193d886f00804f

  • SHA256

    79f71604a169f9ba04413423f043f70361474288d6d3e8d12bb9e18edee3212c

  • SHA512

    da9593a1bb7c9b351cf9046ac91223aad81e41abb5705c638c577d4f519f79a691004255cc08cb9016f1658d149a2ca1dbd7b6bc136d8042bacde154f377519f

  • SSDEEP

    196608:fvtqViCsXDjDyf/dJolpPgToa10/1XdwWlDGFOnJLpHa4m:XtqViCEDCJ83a109XdwWwsDH/

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal (1).exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc