Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Crealexe.exe

  • Size

    7.2MB

  • MD5

    cd3df7cb617987725f0435887c0bbd05

  • SHA1

    2a95ff3dcf528d0a521c05db40e5a43ad70b5986

  • SHA256

    0e201afd9ce90d9a171cf3eeb999c36f38490c3a85e1d0349a8f18adaa0e72a7

  • SHA512

    c69dca39f0902f9d30bc2b49fac35aee81df4f7ede997942cd877070a01dd8265ea0925af97247cb8906dbd7293119d7257ca74fab2e8edaf0702ce3e26ee57d

  • SSDEEP

    196608:c3CT+aj1rpnrJehwiIbZg4TIdQNm5XKCt7oOGJwDb2:sCT+aoqbCdQyftfGJwDb2

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Crealexe.exe
    .exe windows:5 windows x86 arch:x86

    fa2936ff523bbe01bb11c81e10c9ad2d


    Headers

    Imports

    Sections

  • Creal.pyc