General

  • Target

    CrealImageLogger.exe

  • Size

    15.9MB

  • MD5

    f0c6f929d0966e1ae9df77ace92405eb

  • SHA1

    b5bd51e038d1eade2da2e33827829c2fad5ca3db

  • SHA256

    f65b48d6ace46506e4422debf0bebca85bcc159d572b80fc7d5d5cfb73173264

  • SHA512

    2afb25a72c694f39a9c8584e5163d08234cc1ef43982584a20c4a9f8e0f1bb4d2fbcd78b9060adabf37e28e2ce79d760cdf18eed7a9c39902ee749cf3a73659b

  • SSDEEP

    393216:uiIE7YoSD2ntpUTLfhJsW+eGQRCMTozGxu8C0ibfz6e5wE1bmXdWCU5:v7rSDaHUTLJSW+e5RLoztZ026e5DkVU5

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CrealImageLogger.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc