General

  • Target

    372a094e3a87ab32ea359030f48529841692de13414e021eebc1822a2a72d43b

  • Size

    13.2MB

  • MD5

    4f445c722513cc33f70c8ca7870c69ac

  • SHA1

    cbc255dde44b495f8bfb71ead1a125c2dc8a4d34

  • SHA256

    372a094e3a87ab32ea359030f48529841692de13414e021eebc1822a2a72d43b

  • SHA512

    ea8a77f8b0901495670a5697d945cccd13f9a50e4c3f0b98ebddd638623831a229a5bc5f2ae9a7e765943ed68fe38f48070ba5b0bdf7de7e13cb230ef6fa03ac

  • SSDEEP

    393216:vAiIE7Yo9+4uaW+eGQRJ9jo7BGcGRY/dt1WomY:J7r9+RaW+e5RJ9MtpmY

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 372a094e3a87ab32ea359030f48529841692de13414e021eebc1822a2a72d43b
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc