General

  • Target

    launcher.exe

  • Size

    5.2MB

  • MD5

    8c334513aa2619b8dff4a5496e734cc9

  • SHA1

    4d9840c2f751d7a16f726b9664afb9f2499b753d

  • SHA256

    7d0178f38fa7ec041e4b131a3d9f18c8f4b3dcd20c0907e5b7032fccbb02abad

  • SHA512

    a86ba6ca77c6f4384d397d0dcb32e7630e24abed9a8166fe0dc40d3dfedf23eb11c864476fa8ae1b89d5aa296cbf17e04f6f1119563624823cd929baa9884a5a

  • SSDEEP

    98304:mgrY9PJKlCwdhFik9O5qUGzVpK7JN9OWZpkOUJVXNyJWR63Jgv+4L18w:m1JIEk9nQlRbkhX6WkgpW

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • launcher.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • Creal.pyc