Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Spoofer.exe

  • Size

    16.8MB

  • MD5

    eb13941aa440f228923e0b8557408a96

  • SHA1

    5a246d1ca2f712c6d67312e1fda196218a6b0de6

  • SHA256

    2aad2a2097f6b6aa980121a5f394d7f0fad48b7e33198670e417c86a303ad59b

  • SHA512

    010b3fc57054be6869916cde88bd3792669ab5d7bcadce78562564af373999df9ad7087b2cd261e0f2b437d2d572d7588b78ab0f934abce0ec823a5a5674e07a

  • SSDEEP

    196608:iC0sKYu/PaQts1k4FMIZETSRjPePdrQJM96KbABLOqi8wC7hzYPOCl8de/yDMkfS:RQtseQETSRvJQnqOqi81zdCyd76

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Spoofer.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc