General

  • Target

    EraDebbuger.exe

  • Size

    14.4MB

  • MD5

    b6e1bef653b682728fc9b279f925dd24

  • SHA1

    f28f7b3ef8a5ccac8116c7b9b4a3f5048685b039

  • SHA256

    8781ca2d2cb19b24b8cbe5da23f8a640578f58e26259cdc68f7596446ffdbff6

  • SHA512

    7952c44afd96e210118ac8e7755d487ec7580045bb3398c10c1419f2802a319b0dc816e1dc716daddfa74e74bd3d5e9e6a159bbb7b3f7028a79afcddc5454cd5

  • SSDEEP

    196608:mXGX180pr0sKYu/PaQ+DuhfeidQmRJ8dA6lSuqaycBIGpE2o6hTOv+QKfwJSKfFP:RX7QMidQuslSq99oWOv+9fgSueK2+yw

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EraDebbuger.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc