General

  • Target

    textures.exe

  • Size

    14.2MB

  • MD5

    9bd41454970a9725eddb17d1a75a7719

  • SHA1

    24287762941050a7be3d7199947c75e4a465da9c

  • SHA256

    50f84abe06c26713415e341abfc314bf09b0734441e37325c3be893581136d95

  • SHA512

    5d9251f643a6ddde8b4d0183e891a741cae5ce6f6e4dd998ca97bbd3b0df1599ce01a13a18a973a5ad8754a3e1f77eb6bde62ae72020d947b574759e9f3913c6

  • SSDEEP

    393216:iEkMD0bwW+eGQRIMTozGxu8C0ibfz6eKk7vA8T5NWj6V4a:iUD0bwW+e5R5oztZ026eKkjTe6V4a

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • textures.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc