Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6c7181251a...KI.exe

windows7-x64

7

6c7181251a...KI.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c7181251a07d546f223a9b2c43d5ed0_NEIKI

  • Size

    9.3MB

  • MD5

    6c7181251a07d546f223a9b2c43d5ed0

  • SHA1

    01f9bb5fae32a436e9b5f1c17b545819ad176850

  • SHA256

    aa6e449e6babb1a591f972e51562c9c42b5c396b437ed18e89603f21949f7280

  • SHA512

    f52ec7a2ce25513bfd0a5580939bef30bcec8c262d5c6322d7b2305b5aa1f5e3a401cd267c5fcd2f292770d8806998128643f5b4ebd13398d6aa1b96d35e6d4b

  • SSDEEP

    196608:eKrnlZwqA+1W903eV4QRItpDjIIAcwDIlaUGfSEzRPkv/k9UpIi7:TLllW+eGQRg9jocBGKklX0

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c7181251a07d546f223a9b2c43d5ed0_NEIKI
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc