General

  • Target

    SecuriteInfo.com.Python.Stealer.1122.27257.27673.exe

  • Size

    15.8MB

  • MD5

    0c9d8eb4648d03ea683e15eec87c67b6

  • SHA1

    24903492340b3a5ea077fde40cb48a041bcc8b08

  • SHA256

    703f97038c9cbbe49dd6e46fb67b03814b4ac4d4f2141a39aadddc0964305881

  • SHA512

    096f21839d17a53886f545e133d4fc81b36ad2b9f1350beccccfe138cbc997103106ccd7929981af2082ee3fdf15243671637bca07104921d2ff595dfef1e2e4

  • SSDEEP

    393216:rXB+4uIntpUTLfhJsW+eGQRe9jo7BGcGVo/S6fWk0/:rx+RsHUTLJSW+e5Re9M3L0/

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.Python.Stealer.1122.27257.27673.exe
    .exe windows:5 windows x64 arch:x64

    bae3d3e8262d7ce7e9ee69cc1b630d3a


    Headers

    Imports

    Sections

  • Creal.pyc