General

  • Target

    creal.exe

  • Size

    15.4MB

  • MD5

    cdcdf8ec02e160f4f74313f028e5fa96

  • SHA1

    89c38699cd152cfbb0a08cfa8a2659c9bf58d6c0

  • SHA256

    f995818761de512f7328092d1971c51de058cf6f37882adea1ec4d1ee8436296

  • SHA512

    90a2cfeccfdd37f2a18a8baa32937c046c864d4302c2e177187f7559e7230bf7d08c53e46d06aee8bc41d093ecf48301a015027a2f5398f2e3ad603a0e0e989b

  • SSDEEP

    393216:Vu7L/sQ1oSdQuslQq99oWOv+9rztIMoTT59:VCL0Q1xdQuSDorvSr5I3v5

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc