General

  • Target

    multi-toolv3.5.exe

  • Size

    14.3MB

  • MD5

    514df4dc9408b1fce4a439453adaf002

  • SHA1

    1d20c252362ea35549efc1ce22769f81f7acf796

  • SHA256

    a7e43b1acee784167ebbc9d0595e01a1fbf0fe58922d94d386bb87792ef562eb

  • SHA512

    8370695a8155428c02d1f95337a36d78aacf444e2430b1bfe64fd21fa0af1da622f2a2056d06c0193220eab87e2a4333e5bc0e93f2609c063dab9dbd271fc7b2

  • SSDEEP

    196608:un0sKYu/PaQ+Duvf7ndQmRJ8dA6lSuqaycBIGpEqo6hTOv+QKfwJb7vDV7qh/lvC:8QPndQuslSq9RoWOv+9fgb/Ev2X3

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • multi-toolv3.5.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc