General

  • Target

    Creal.exe

  • Size

    13.2MB

  • MD5

    b979b893c4b1e42a310a75d990964f4a

  • SHA1

    248468fdbfea6d63d4e09f76f649db4dc19acfee

  • SHA256

    1396a1e840b772b0a044dcc9bf918d28742e290009a439eaf47da0e46289cc54

  • SHA512

    3cf8bd879c93b81f5ec758323826ec7b04207626dbdf9378be8fe37a22f8f6ff2983d9007ec174a992da4c4f77974407740a39a1048bed0c273af94a6b30fd05

  • SSDEEP

    393216:2XGD2nwW+eGQRIMTozGxu8C0ibfz6e57g1bmXiWCUI:22DawW+e5R5oztZ026e5WFVUI

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc