Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    StormLab_setup_5.2.8.exe

  • Size

    17.2MB

  • MD5

    c84ba7acd74c4fd0db833bb6e4d58a89

  • SHA1

    ed81f8fb2a97688a7edbb062da0a3919dc6cc947

  • SHA256

    2fb79ccffc743846213eb5c45e4c0eb6a79439769d5d53ae57459742440c8693

  • SHA512

    07e20cb781725e0651154e322f27353fd1e44f1adc007cc4e0307fb32e45c7a88089d73547ee23b6a40e2a7b21298cc8701dca47b5147303067d6fbf5f72f0d0

  • SSDEEP

    393216:WiIE7YoPQMRHi+2ohcyLbdQuslSl99oWOv+9f+wC4O2jTX6w:X7rPQKHiRyc0bdQu9DorvS2wC4RTr

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • StormLab_setup_5.2.8.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc