General

  • Target

    Roblox Account Gen.exe

  • Size

    17.1MB

  • MD5

    90521f0f48adac1dd01d798ff8ab86b6

  • SHA1

    707f1dbc63829736027f6baddd6b0a523157245a

  • SHA256

    fc11159c344eaa74b2600fb01a142c7c12d9b00c2e25747bc62bdfc15f0cf3f3

  • SHA512

    9adafccae1e65791418c69835f95a73a866dfdb44a36107247555eb05d3e051567af1657c57d58d61a3b25a9ce7e234c0be7c8124093a3d26ca14aa2871d139e

  • SSDEEP

    393216:kEkZQe1obI/ddQusl+l99oWOv+9fOAsvWDjslv:khQe1h/ddQu/DorvSmAiW3s1

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Roblox Account Gen.exe
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • Creal.pyc