Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    SecuriteInfo.com.FileRepMalware.7168.8036.exe

  • Size

    18.1MB

  • MD5

    4a33d5411554a30440a043d2e6fd5e6e

  • SHA1

    226c7b13480b7f1b01fbcc6f994a2de067241144

  • SHA256

    7d384c126ca153ae5d27d53dde95f4c4a5f1b284237bab45049cca321be24098

  • SHA512

    4791aad5745861437f145c9aa0ae6f94b195f6d7c9d11dc5aee0d4b81b461931ffbe982a1dd1b647578e97a69ea426e89f9b8ba01ee5cf0d4e9815fa129cef98

  • SSDEEP

    393216:JEkZQtsTTG9Hk3meBcGfd0vYM0mr+6oCWdSsl:JhQts/GJaT5F0vYFm6W

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.FileRepMalware.7168.8036.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc