General

  • Target

    VapeV4Cracked.exe

  • Size

    13.6MB

  • MD5

    a3c081e2912080dfdc6a9c981530b6f0

  • SHA1

    4eeb04ea61ff6b829b8b52952d68584a1cdb6e69

  • SHA256

    38ae76715fa9a566a0e74f682b7dd9f588b54b263bea369429be49848ff0422c

  • SHA512

    c16e60520245030f3cb3f52266bf20295c2f020bebdc2416e51b0db87d931069e02b3c5f5a92bc83316136767eb055066bc8c34be8cf2a7061841be2cb64f291

  • SSDEEP

    393216:/niIE7Yo5D2nwW+eGQRIMTozGxu8C0ibfz6e57K1bmXdWCNx+:/87r5DawW+e5R5oztZ026e5IkVN4

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • VapeV4Cracked.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc