Overview

overview

10

Static

static

10

sysEXEC/deter.dll

windows7-x64

1

sysEXEC/deter.dll

windows10-2004-x64

1

sysEXEC/quickDrop.dll

windows7-x64

1

sysEXEC/quickDrop.dll

windows10-2004-x64

1

sysEXEC/sysEXEC.exe

windows7-x64

7

sysEXEC/sysEXEC.exe

windows10-2004-x64

7

Resubmissions

18-06-2024 06:55

240618-hpyv7a1hqh 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sysEXEC.zip

  • Size

    18.8MB

  • MD5

    b64337c77cb62ff48d87955db53a863f

  • SHA1

    e3c23ab913f0fbe28e2be66f643085b3cdb57e55

  • SHA256

    1b0f8b7a56eedd6416a91dff43c83a15ae2e4ddb966412e5abdc1acefeb8f6c2

  • SHA512

    c5b1e678b65b485daf313541e43de1ae57a55ee06e48e9b6084c8dfb9702248ffd2f9d976a525ad4acaf486d05cad764c77231ad952635bf36a969f75d3bee89

  • SSDEEP

    393216:7oZJFDY1RYfK3/ayMJ/sK43Z7/oSQlo0ztn17fOq:7oZJq1RYfKDMJ/sK4pTobllzt17Wq

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sysEXEC.zip
    .zip
  • sysEXEC/bootstrapper/b0x.dll
    .jpg
  • sysEXEC/bootstrapper/curl.dll
    .png
  • sysEXEC/deter.dll
  • sysEXEC/quickDrop.dll
  • sysEXEC/sysEXEC.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • Creal.pyc