General

  • Target

    Creal.exe

  • Size

    19.4MB

  • MD5

    dd53ed3706c2430bc5e8a338871db91a

  • SHA1

    93ab5025b0602b1d3b8e0ebf3a8a97457b2c639c

  • SHA256

    4771e5eedbaf4e273902971498a98a0caf93c34117dae57576d31183144c8c4e

  • SHA512

    b5d159d596493d6b555a963f351cf9e67c2145c6ff1af7a1621fc12fce00c3559be52b8cba984b3948fa3df215721374d988817356caa4ccfcec0b0a940c1d35

  • SSDEEP

    393216:REkZQtsrr7M5livQETSrvJQnqOq/rx7zdCyd06:RhQtsX7M5lmQEWrhQAzi

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc