General

  • Target

    creal.exe

  • Size

    17.3MB

  • MD5

    b1445dcd313c443ed4f812986993a0fd

  • SHA1

    8029b4c221484bfcb27caeffb992466e33b3eaab

  • SHA256

    c3287943f04829680ed363dde92950259b70235de215e44b958ff2090b960d1f

  • SHA512

    0ccd833387a7a34cdadcaf266d5b24a0e5f52870ee1551bd045ad680bcec5c1f33dcdc058c85d5f9d95efd8e9f4753f2869cf72f781a039ea296f95ab8349894

  • SSDEEP

    393216:eiIE7Yoa+4uHvwiHi+2ohcyLkW+eGQRe9jo7BGCQlIaJKt/WoAfXQF:f7ra+RHvJHiRyc0kW+e5Re9MppegF

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • creal.exe
    .exe windows:5 windows x64 arch:x64

    380d2cbec5e800eecb6612f15b9ac012


    Headers

    Imports

    Sections

  • creal.pyc