Resubmissions

07-01-2024 17:46

240107-wcqwpsbedq 10

07-01-2024 17:45

240107-wbsnxacdg6 10

General

  • Target

    Creal.exe

  • Size

    13.2MB

  • MD5

    709bfa6c20f38aa909f80c0eca2d624c

  • SHA1

    48cef5ce3cdfbb9f3cddffb0647b2d80ced6ad13

  • SHA256

    2a332f209daa3b58df34483be1ac792f75f08d166e6c6f2f702538d17b5ef56b

  • SHA512

    5a53983304b62c6ab065cffce08e97231ea52f1ea51ca3eb4da06c884019f414a4781dd65d7205b02b6f45abb61c9c58f808ddde21d4fb5630625e445cc68da0

  • SSDEEP

    393216:dXGDn5nwW+eGQRIMTozGxu8C0ibfz6e575A8K5aWCuVl:d2DnRwW+e5R5oztZ026e5JxVuVl

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc