General

  • Target

    rosetracker.exe

  • Size

    19.1MB

  • MD5

    6931186e23c622ffb48c4a927d86f648

  • SHA1

    bdd6200fd58d979708e2dcc598998098122cc4be

  • SHA256

    b03c3ec6a842ad7548717a0099cc14d938c7da2ee33796ca7119989d4b795c99

  • SHA512

    9ff441d096c040593a426c5a8f85c7cc444ada8c8d838420e7e48f5cfed1766b66413f9d754d135ebc1215f475ba88b35823c72aaec9ad711087b152fce81de2

  • SSDEEP

    393216:JWqu7L/sQqTIKKmr2pu0tTtdQuslSl99oWOv+9qDZ1XaoI2St:gqCL0QuIKKmr2puI5dQu9DorvSC1FIL

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rosetracker.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc