General

  • Target

    APK_MODDER.exe

  • Size

    18.5MB

  • MD5

    7f6015270de9f64c4b7ded99f34df9b3

  • SHA1

    378b7a253c4abc0c8c4bf9a32a15cb66453512ab

  • SHA256

    7f03d156ac46d4c4d435be8b991ad54ab7a65dfaa2fdc60e3369082d73d80488

  • SHA512

    fb9b2d44bdc89ca18b1fd762bff1045f939ae2ba35820a33ef48f57d90620055d7e4e00b89d5bd81bb4ab7387aa2b622e68eb2b6067e6e42632567d33f5878b6

  • SSDEEP

    393216:3iIE7YoPQtsTpyfXlk3meBcGfd0vYMaWqkQvFXu0JzVo:M7rPQtscNaT5F0vYkq19no

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • APK_MODDER.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc