General

  • Target

    fec.exe

  • Size

    13.6MB

  • MD5

    cb4827f8da72fcf72ac694571946125d

  • SHA1

    c6ff6a2a2656da0d98890d04b6e53fe991e85a2d

  • SHA256

    a6c979d23e9204f2537877778fb86c10b41c895a9a922d9a56dc6800a366df2e

  • SHA512

    b345da28a9f48c6233d23342dbd78c14d882ca7d69ff4d128913a1bb6e614985c636c7ae9cfc9933bc7df899a21e3e5a2f20bfa215cb6ba9df1c59c763168cb7

  • SSDEEP

    393216:iEkcqY4q1+TtIiF0Y9Z8D8Ccl6ln7E1PKksbuK+:ikD4q1QtILa8DZcIl7tkBK+

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fec.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • Creal.pyc