Resubmissions

03-03-2024 19:24

240303-x4lxhafd96 10

03-03-2024 19:23

240303-x3wejsfd86 10

General

  • Target

    imthebiggestsexhaver.exe

  • Size

    16.3MB

  • MD5

    6b08a0f6d0cb752836546cc4920bc711

  • SHA1

    5444ce8178a75cf42c5fdde3ff57ca17d92fd252

  • SHA256

    891624714cb9e8ecc8a71ab2651568a544202bf0aacdc52d897c8222e86cfc55

  • SHA512

    e2a455627a336be639d6eebca68b80552510ee9381e70820dc6ee6d2e85d49d4ae9bafa3448783e78a7bd3e2b6e5a7b58fee3be35e0b5d510b04587bfa9e5484

  • SSDEEP

    393216:oEkZQTwpSNPG7NmiZoPL2Vmd6mKVBkGCwwtKb0x:ohQUpoKEA+yVmdU3+NAb0

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • imthebiggestsexhaver.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc