Overview

overview

10

Static

static

10

update_2.5.zip

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    update_2.5.zip

  • Size

    4.7MB

  • MD5

    3ff6129db5f5f1738b3c6cfe117f3b90

  • SHA1

    06940e7a9c38f8d2833b52bd2d2f44047c2a66e0

  • SHA256

    146eb1d446dfac3d928d431436b48dec715c4c52932c23216eee3df173a20fd5

  • SHA512

    3c7500aec01c6c4d2e462a0c4f628501cc9a1abcd80450caad6319f52ca1857f96101b08c2f58e631d194d61304b6143f260b64174d737d118b491b7ca8fd830

  • SSDEEP

    98304:kzSz+zPQpnvEzPdxRa5PQ0WXCIlYOmUGSZGZkpCT/wG5DLsF1fz5QGtaFbzz+:k+KAvEzTRLFZld0UGFLsHfKT+

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • update_2.5.zip
    .zip
  • update 2.5/2.0/Browsers/Compat.browser
  • update 2.5/2.0/DefaultWsdlHelpGenerator.aspx
    .js
  • update 2.5/2.0/machine.config
    .xml
  • update 2.5/2.0/settings.map
    .xml
  • update 2.5/2.0/web.config
    .xml
  • update 2.5/4.0/Browsers/Compat.browser
  • update 2.5/4.0/DefaultWsdlHelpGenerator.aspx
    .js
  • update 2.5/4.0/machine.config
    .xml
  • update 2.5/4.0/settings.map
    .xml
  • update 2.5/4.0/web.config
    .xml
  • update 2.5/4.5/Browsers/Compat.browser
  • update 2.5/4.5/DefaultWsdlHelpGenerator.aspx
    .js
  • update 2.5/4.5/machine.config
    .xml
  • update 2.5/4.5/settings.map
    .xml
  • update 2.5/4.5/web.config
    .xml
  • update 2.5/browscap.ini
  • update 2.5/config
  • update 2.5/mconfig/config.xml
    .xml
  • update 2.5/update.exe
    .exe windows:5 windows x64 arch:x64

    023abd09c65289e3a2df4aa2b19cccec


    Headers

    Imports

    Sections

  • Acarnia.pyc