General

  • Target

    Danger.exe

  • Size

    13.3MB

  • MD5

    753246758ca655f425dd579c3271aa76

  • SHA1

    e5e90bfc6e04b3a7aa0dd6bd6229503f5deae0f0

  • SHA256

    1fa5cea81cc8a36a94bb8e326d0342c8640e81fb9277bec8211fcea1760c2631

  • SHA512

    a6cbbed0966d93de7cfa0334523ebae98224fddafe17f41a321e77788dce97ff5cf45d945404da126e70163aa53db477ed24bba2688b778309034a9126bd475a

  • SSDEEP

    393216:sEkMDn5nwW+eGQRIMTozGxu8C0ibfz6e57dA8K5aWCuVl:sUDnRwW+e5R5oztZ026e51xVuVl

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Danger.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc