General

  • Target

    Stealerium.exe

  • Size

    6.5MB

  • MD5

    5459cb7f9a4d0ead8c2e57d91b7d8db9

  • SHA1

    6f52b529b9f5e1fe796e70614c0084f05a7b01cf

  • SHA256

    36c6338180350081adaf2ea52e4d39c29ddcbd4b7a52bc1a3d125ea97f6100be

  • SHA512

    bfeb3bd6a35a0b7a8e9744a405e519e4ff6296612ec130a9170bc3f27bc96af136cf911b6dd87919319d212d14908dd46c56edf371a6253c58572365a2bf44d6

  • SSDEEP

    98304:Nm8DwH8jFZikk6CmMkSxtK5AgHsJT1PC2OBcXWtPdtLifKcWMjeX9l75BHS8pttJ:Nm6E8H/COs1PCtbPd5xMkfGY3FtYIIS

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Stealerium.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • Parmen.pyc