Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ayo.exe

  • Size

    16.0MB

  • MD5

    627cc44e0f1f2ce6f5b5b2916d44f7e6

  • SHA1

    a3e98f4ea558599c08e7cd53773abbe1abe53621

  • SHA256

    5cfc72e90d884f2902c17c860e3141dc4f33b5a18714f56a51b9df8198a60712

  • SHA512

    d766f5246e42593ead9153df86a75adbd480a782144a3ead573f0e0e96c788b1172d260df963ea374c279de4813af421997d75a76f53f2e571ef50599e3bb971

  • SSDEEP

    393216:OEkMD3VSo03kiJo3W+eGQRCMTozGxu8C0ibfz6e57O1bmXiWCU:OUD3wo03kiu3W+e5RLoztZ026e5kFVU

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ayo.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc