General

  • Target

    fixx.exe

  • Size

    14.4MB

  • MD5

    bd12eb2d38b42ed0044c5f7fa9d26126

  • SHA1

    8331e0f4a336d03f51b7e352b6c6847135d3d13f

  • SHA256

    81ca385e84418f7da789d4c967a4934820ad69b6e84ae65ca9f902594abf556a

  • SHA512

    864becb55e613182965f9b30ae4ee19503668b00bf99b1dd97bf20c5d61876e9e3dcc82bc0a4d5142ca15c394ced336538972b7e7b60e14b28ffcb7843078c5b

  • SSDEEP

    393216:miIE7YoPQ6dQuslSq99oWOv+9fg+4fWUuwfw:n7rPQ6dQuSDorvSY+4Bur

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fixx.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc