General

  • Target

    SkisNudes.exe

  • Size

    13.0MB

  • MD5

    17b865ea104454f07df15fbddaf134f6

  • SHA1

    68ab1e1d54003aebd661405efe1019bc2b4c5640

  • SHA256

    fdf6842dc3ec0e8a23281b676ffe4967d561bb954c0b4cdef06557de09deef1c

  • SHA512

    cbd9883499472acfacfc2d056392d08471e4e7573ca8dc813e991137de198a3ed995a5b3689665f153db0bf14c48246a4ad745db86094311b64d7c8c759d4332

  • SSDEEP

    393216:AiIE7YoaD2nwW+eGQRIMTozGxu8C0ibfY6e5Y1bmXdWCUI:B7raDawW+e5R5oztZ0R6e5SkVUI

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SkisNudes.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc