General

  • Target

    NSFWGEN.exe

  • Size

    13.8MB

  • MD5

    638d136547ece9e4f282d62aa6562a07

  • SHA1

    19ba1d25332fac7c3fe7bf0eae2ad3520fded5db

  • SHA256

    d7407d5dd0dca80aa9798ff6aaa10635474feab533b7e6db87d759abf69f1ee8

  • SHA512

    e1c2f4a6ffff124c5a7cece7a48be026f1098708376f3e03d46f2e8a0f35e05d223da05b78ef3417422d62ce9feaa137241b0f879b731f63b2c1cbaafebc3323

  • SSDEEP

    393216:hiIE7Yo5D2nwW+eGQRIMTozGxu8C0ibfz6e57F1bmXdWCNx+:O7r5DawW+e5R5oztZ026e5XkVN4

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NSFWGEN.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc