General

  • Target

    Creal.exe

  • Size

    13.4MB

  • MD5

    59a8a36217724a81fef8f48fa309b4e0

  • SHA1

    2178054dd790434106ba34a79cb60ffee6058c97

  • SHA256

    216be8b08e0d04bb4dae8d3491b28206e33a86878abedee93b8fdffe103cdeb2

  • SHA512

    e73cb3642b5195dcb62e40ec6616924be13c9f4f6d8ca1963454fab345c94d3ada96d92e877ce95c5db5a9a197b1a5113f1ea3c49d2bf5c5429907752c42e2ac

  • SSDEEP

    196608:PM/EkwAc7wuLIoBA1HeT39IigwE1ncKOVVtd97wrhkiLtQGN+j9WBiuT6Ww4/:KEkwAcsIq1+TtIiFg0VBxwSS6bjEA6

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • Creal.pyc