General

  • Target

    minecraftinjects.exe

  • Size

    15.9MB

  • MD5

    b8fc1447b11d53d0fcb1ef709b5639bd

  • SHA1

    b7d11bc55aa25fcb05bce3137c9b9b25a12dbcfe

  • SHA256

    41016a42eebba343a485e97334f5f1fd7d94e6ddf7dbc8942e15a62a39e227f1

  • SHA512

    61cdd424e15dc9408dc24dc1e00ae4015ba7cf60fe528654a223241359aa13403f85a0e808cc4f84b19b5a79ebf7169307735f0cb5d40491fc94b3c3acf3f06c

  • SSDEEP

    393216:riIE7YoTgf8yntpUTLfhJe1+TtIiFGuvB5IjWqn6eCz14ypRXiWCQJ:Y7rTb+HUTLJE1QtIZS3ILn6edyaVQJ

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • minecraftinjects.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc