General

  • Target

    malaia_source_v7.exe

  • Size

    14.1MB

  • MD5

    d5cbe8494a721b169582b66aa2b8e6a8

  • SHA1

    aad532acd2fc4fbe6c8a3bf5edccb528cbaf7861

  • SHA256

    ec82e65540c0ae54b267d94f30a24a65e431e7345f095f6a62e40e4df7f77262

  • SHA512

    42d95d51badb34d0646f95f42b3d8e526dcba3cbf9fcd3ef71a1329ddef7f56e040af3778a87ef49eefd63497130327d928dc51f62a4726b31511bb8aee6f537

  • SSDEEP

    393216:BdEkZgf8yq1+TtIiFGvvB5IjWqn6eaz15ypX8Wjsaa:BdRbyq1QtIZX3ILn6eUyCesaa

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • malaia_source_v7.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc