General

  • Target

    builder.exe

  • Size

    19.8MB

  • MD5

    95419e62271175d0d3b3306b0befffb3

  • SHA1

    e5a126c4d582372385212d804658056651599d95

  • SHA256

    394a76cae20c6d644a5f9a12099b48ee2058f6b03ff3f83805bb5d078248cb8c

  • SHA512

    5d2de343eb27d2bc471f7368debe98665c07a3a1a79ab2e2b084312f807db07697aa3f3a79b1b683c54b364020f012f812a8018fecf08419011f6945da4771bf

  • SSDEEP

    393216:MQtstvdqJr7M5liAdQJlOwF3MnG3otl5cGaABo1edW3zCd1Z5Z:MQtstVA7M5lndQD3MGYNjbCOf

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • builder.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc