Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

f16ca2056d...b4.exe

windows7-x64

7

f16ca2056d...b4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dc7d0b6fd6bd2e157f3be4b6b20fe4d.bin

  • Size

    14.2MB

  • MD5

    a2aaa4a349ae936f89b3a7de8637bffe

  • SHA1

    2f700d120ae1bbaf1195661db4cd49ba3ef227e1

  • SHA256

    c87a5710a24435b53aa79106b6b735aab4cec83810cb7e84c8046a0c9a8c56f9

  • SHA512

    8516c1546e073da07f4db6e9c4ff822ba00675df5c68b81b8bb395f750f83f5e2c8c46cdc6393ad35a7e7896e8e58734fc2827e21e354f57b369aca872b854b2

  • SSDEEP

    196608:d7llDeo2DRdeDOZjr9IhT1g+feHbLiWeNNuCtJpIZtXw3sHDsuRvT0VuBDLe63ul:tTDstcDO1KZKtHP70IohueEDLe63ul

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0dc7d0b6fd6bd2e157f3be4b6b20fe4d.bin
    .zip

    Password: infected

  • f16ca2056d872f1cae446a151e057fe1d5744f6f26889881050f254008c5a5b4.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc