General

  • Target

    creal.exe

  • Size

    13.0MB

  • MD5

    b5249b2da6a0ca612cf45c36fdd25bb3

  • SHA1

    7e6e5c4d797faf82deed4b49fa6e9763028bed58

  • SHA256

    51d39a30b0eb8d498c9199efd41081e067f00770ecdfca3ed16318d9ae7c9e4d

  • SHA512

    770a4e7a07e53dc3d266e3f5db702a602f8562f730860e478ead1fc7f2b3d44f7cb005b10a8181a95471ab16258d85f8cfa31109c22c7bed2415d2acd90616ec

  • SSDEEP

    393216:Ru7L/povKmr2pu0tTtdQuslSl9DoWOv+9fqX8hXd:RCLRoKmr2puI5dQu9xorvSiMhX

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • creal.pyc