General

  • Target

    Asphalt9trainerantiban.exe

  • Size

    13.3MB

  • MD5

    dd06239af8013cae4cd6766341ee9bea

  • SHA1

    b55b2dd34e8617ef7024f7c1e220d70026d8cfad

  • SHA256

    a5644ed012227b53f62036c9f54c95eb7f8f9105c00c6fd3c230106c6eb38038

  • SHA512

    33708026af1e2225ea012906e20450fc2d788678ab4a8c7e0290649a4a995e7c4375c30d79909b0fe92be8717f7105c817d02c226adffcf5e7c76f96862cead6

  • SSDEEP

    393216:tEkcqY6q1+TtIiF0Y9Z8D8Ccl6lniEuPKSDuK+:tkD6q1QtILa8DZcIli8SCK+

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Asphalt9trainerantiban.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • Creal.pyc