General

  • Target

    creal.exe

  • Size

    13.3MB

  • MD5

    92e0670226c5248551d4f8ec43dca53b

  • SHA1

    8afb4fb0dba912d033daf51ac5916a9e74df8a1e

  • SHA256

    6c69c50fd7fa8d28dab06c677442eb9488118b0cecd6b02f9717c533b39691e3

  • SHA512

    7f301e838e4542ca6c8d699e7d6946a53822da15fdc4c49ea6cc269a26a357786920f5993168a326a7550e26e02cbd874ceb18e8fe70142eda1a9d83d1d9348d

  • SSDEEP

    393216:nEkZgf8iq1+TtIiFGvvB5IjWqn6eCz1TypX8Wjsaa:nRbiq1QtIZX3ILn6eayCesaa

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc