Overview

overview

10

Static

static

10

Creal.exe

windows7-x64

7

Creal.exe

windows10-2004-x64

7

Creal.pyc

windows7-x64

3

Creal.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Creal.exe

  • Size

    16.8MB

  • Sample

    240206-nq81faehf6

  • MD5

    239bfba14c38a806d521a130fdbadcb4

  • SHA1

    76fc6573355941e73809ff3055a16bbc667410a1

  • SHA256

    3aebbd7a53be06f3baad3a42d2479c63c6286b3cdf6a88e7fb5117bad15f7d82

  • SHA512

    54adac83cbc7a574d12b85e3e886db7fb07f13f01821e35693057742620c81c73884965cf1cce3d1ce83cdf5b9b80ef2d31a469543e39fa6843809a4ccfe8834

  • SSDEEP

    393216:eX7Qts2Y2pOeLLDfDllpfaMPgFRgjEflXfaGRu2:eLQts2Y2JPbhHf9PgFqmDQ

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      Creal.exe

    • Size

      16.8MB

    • MD5

      239bfba14c38a806d521a130fdbadcb4

    • SHA1

      76fc6573355941e73809ff3055a16bbc667410a1

    • SHA256

      3aebbd7a53be06f3baad3a42d2479c63c6286b3cdf6a88e7fb5117bad15f7d82

    • SHA512

      54adac83cbc7a574d12b85e3e886db7fb07f13f01821e35693057742620c81c73884965cf1cce3d1ce83cdf5b9b80ef2d31a469543e39fa6843809a4ccfe8834

    • SSDEEP

      393216:eX7Qts2Y2pOeLLDfDllpfaMPgFRgjEflXfaGRu2:eLQts2Y2JPbhHf9PgFqmDQ

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      Creal.pyc

    • Size

      142KB

    • MD5

      21a287ab9e0dbff6eaee53b6acd48e07

    • SHA1

      413b23b99389b25a766d190bcabc821076ecd23d

    • SHA256

      51248692f4638d79a61b3b83ebfe47f21a40cd0f1c43d312c8497f4c5226947d

    • SHA512

      74dd1a0a8e5e543a03d0a0751f123d9b5d34d67d870dca782bc5132dd0719787aafed447b4673ce2e26fbb320939bc7c8d7266d1863d1d269281e85a54761797

    • SSDEEP

      3072:H1+5IxGJ9Oiq3yQZuW3HRGr11g+/3hPJf/ir9ccHP/H4SYOmdcL5hz7akmx3z0wG:vC9V6yQZuW3HEr11g+/3hPJ3ir9ccHPX

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks