General

  • Target

    Executer Fludz.exe

  • Size

    10.6MB

  • MD5

    3c02ef8ccb1afaf6af2641e09f1033a5

  • SHA1

    6873417f8e8c201d290362ca36eeb42a75e29fe5

  • SHA256

    74c969b00c4c4db57aea7359fe8720f1476b96585f844ba3c465bab916e55409

  • SHA512

    d79ad26f413e4567287ab76cca19339df2c52022b45b8b5e1ff41da03916fe0e374eacb7cb782760c3d4211d28dd87db97990ec05003f07d6d00b25cb8b723f1

  • SSDEEP

    196608:yuf7ndQmRJ8dA6lSuqaycBIGpEGo6hTOv+QKfbdVvaV9/h/lkhsb5Uwd85:BndQuslSq9foWOv+9fbdU/k6bX

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Executer Fludz.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc