General

  • Target

    OV.exe

  • Size

    21.3MB

  • MD5

    bbf6d8387a8dc483ef150d9f1d949135

  • SHA1

    f7fd6715223472b74367091ba82a01592ae6aaa1

  • SHA256

    2c1b4fd41ff83c3062719f91ae4ad77c5b61f72f4ac4f85d29a9ee34f7d150fe

  • SHA512

    f27a887ec8ae415abb87f3f797571ab2640855ae82b93bc2cf8541e0c61bfe50236038be396ed3e2ae057b375de6dab1fb7d3c19f824c34b055a16299c0820b7

  • SSDEEP

    393216:QzQtsfh5mKmr2pu0tTkQETS8vJQn+9PWkA75umhTdbgDqxMwsQkd:QzQtsfXmKmr2puIYQEW8hQ+ZWl9Jb0wS

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OV.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • OV.pyc