Overview

overview

10

Static

static

10

creal.exe

windows7-x64

7

creal.exe

windows10-2004-x64

7

creal.pyc

windows7-x64

3

creal.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    creal.exe

  • Size

    17.3MB

  • Sample

    240221-ymfvlaee9w

  • MD5

    b1445dcd313c443ed4f812986993a0fd

  • SHA1

    8029b4c221484bfcb27caeffb992466e33b3eaab

  • SHA256

    c3287943f04829680ed363dde92950259b70235de215e44b958ff2090b960d1f

  • SHA512

    0ccd833387a7a34cdadcaf266d5b24a0e5f52870ee1551bd045ad680bcec5c1f33dcdc058c85d5f9d95efd8e9f4753f2869cf72f781a039ea296f95ab8349894

  • SSDEEP

    393216:eiIE7Yoa+4uHvwiHi+2ohcyLkW+eGQRe9jo7BGCQlIaJKt/WoAfXQF:f7ra+RHvJHiRyc0kW+e5Re9MppegF

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      creal.exe

    • Size

      17.3MB

    • MD5

      b1445dcd313c443ed4f812986993a0fd

    • SHA1

      8029b4c221484bfcb27caeffb992466e33b3eaab

    • SHA256

      c3287943f04829680ed363dde92950259b70235de215e44b958ff2090b960d1f

    • SHA512

      0ccd833387a7a34cdadcaf266d5b24a0e5f52870ee1551bd045ad680bcec5c1f33dcdc058c85d5f9d95efd8e9f4753f2869cf72f781a039ea296f95ab8349894

    • SSDEEP

      393216:eiIE7Yoa+4uHvwiHi+2ohcyLkW+eGQRe9jo7BGCQlIaJKt/WoAfXQF:f7ra+RHvJHiRyc0kW+e5Re9MppegF

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      creal.pyc

    • Size

      49KB

    • MD5

      156359611afe30c92b1eea1dc3c8234f

    • SHA1

      2aed1d8a56c6f0a4489c921474362769e21a439b

    • SHA256

      e3c2c462f098f00425cbe737f8878880c90ebebe48966d42694db87d89a331fc

    • SHA512

      b1341f750734c783f246d4843794b7aa04552fed5805f73f0f2405f2334ad524ed5cbbaa548309632c1630542e83fd2e1c834a8024d8dbf17d7b582a08283a71

    • SSDEEP

      1536:zr1GFEfrLPpZ73YU725iZc8QQmGw9HRpN:zhGFEDLfYUUiibN

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks