General

  • Target

    Creal.exe

  • Size

    14.4MB

  • MD5

    546e3843cb31f296158474211d62afaf

  • SHA1

    bddddb4336f777a8135fff8cc93f7cb45227a49a

  • SHA256

    dc5fee5594cd71992651a98980398c14807b8b595e69499b5741832d90240d82

  • SHA512

    8a8f173be9ff33512047c230dabdeb3b0c08a494b33cad7947c0bead1979454279df3e828789e78e49708a85c1465eba588d5990cbc0e7533e497644b9db2b5d

  • SSDEEP

    196608:OktGX180pr0sKYu/PaQ+DuhfldidQmRJ8dA6lSuqaycBIGpE2o6hTOv+QKfwJpax:kX7QJidQuslSq99oWOv+9fgpazD0RZb

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc