General

  • Target

    Invimage.exe

  • Size

    8.2MB

  • MD5

    946ab93d1338d6eabb8573a011742411

  • SHA1

    4d42c5149a20e0a1fc6b7b8f592eac6d4648923f

  • SHA256

    bf3fec86a7f2889eb1c771d9f1b04cf92c917ccf570e0c51c06791f64bcab178

  • SHA512

    9815fc62ff97f3086c4b265ec90b362c46590a481a4fb7596c2db49e0351e9d840e9daf7d16fa0a4ff83acf2a499d2397717870435c14f80ec1666165664777d

  • SSDEEP

    196608:gtu78K/1+AdQmRJ8dA6l7aycBIGpEGo6hTOv+QKfg90QnLMX5:Au7L/fdQusl29foWOv+9fg

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Invimage.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • creal.pyc