General

  • Target

    cheese.exe

  • Size

    15.2MB

  • MD5

    d8f206953733b7d0fd19e520e183fbae

  • SHA1

    ed7d084e6c76ea0b3c9fdcd18dd1fd9935d50191

  • SHA256

    127504a21fd9de944f1473cbfcf8a4751755bf54273074737df9bc6f8b23d2b9

  • SHA512

    33ff230c631ceea33506c919976170b953898c0e64660eff1d43f9c5dee23c280b775ec1fa21241094695513a1375bf12b3ecb8b71ddeaa618a3f706abecf9e0

  • SSDEEP

    196608:iYiEkv0sKYu/PaQ+DuhfKXdQmRJ8dA6lSuqaycBIGpE2o6hTOv+QKeSE0wJYD2EM:IEkZQ4dQuslSq99oWOv+9rzgYJWlyk3

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheese.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • Creal.pyc