General

  • Target

    creal.exe

  • Size

    13.3MB

  • MD5

    9ef498e3313cca5b7e333429b4df8fa1

  • SHA1

    a50e0a79b24bc5dacc3121458a73288c51028acb

  • SHA256

    699fbefa4676023e67ca6780b6b72a091c3cfae26966d4ff97736c6cb2cedc38

  • SHA512

    93d0cef2056854d13c7b20a994ed81e81b57dafa4911c71307a22c3d6612abf98f2ae9310bbb4c560a6597fcfe66d50524d0195709c704c403685fa63d1f5576

  • SSDEEP

    393216:ZEkQExJDBfFZNRwSo6ivaCncpH07mKfjN0Ft:Zo4BfFXR66iiCngH07rK

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc