General

  • Target

    Creal.exe

  • Size

    16.0MB

  • MD5

    27e097ce4a770194d620d2810246b2a7

  • SHA1

    03acbcb25d9c0629f4abe9f67482a5bfecd905ee

  • SHA256

    c69d22c654514be0a4446ad0f808bb14767dc0782182c783bab84afda51857a6

  • SHA512

    d926d3431a92de674823c00a9cb46bdc924955d9c4b53dd34b564ee13e24f860122372ba6330e1cecf9852ee9be0d8c3e432f6541a14024f2534fdcccf517f01

  • SSDEEP

    393216:biIE7YoSD2ntpUTLfhJsW+eGQRCMTozGxu8C0ibfz6e57N1bmXdWCUI:I7rSDaHUTLJSW+e5RLoztZ026e53kVUI

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc