General

  • Target

    Lost.exe

  • Size

    13.5MB

  • MD5

    424379a523bfc83fd9d1d49ee77646e2

  • SHA1

    88fb369aae68939600323ddfefd8dcbf77661c5a

  • SHA256

    39ede861f87b3f423931768d41395acb3bd4112470c30812387dbd24428bec7f

  • SHA512

    6b63c07d5a50ea38cdaf6792c58b010abe158cc9abb36b9fa39dc8f13dd357d24829c1221e442681a5874680f6d206309058be235742e9d0bfa503ca8950388c

  • SSDEEP

    196608:nuEkwAc749UERBA1HeT39IigwE1ncKOVVtd97t86OkpPtQBN+j9WBsBTlqx5Kx:uEkwAck5q1+TtIiFg0VBxtXtR6ijEjS

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Lost.exe
    .exe windows:5 windows x64 arch:x64

    2ac23c52e7647c5bbea38e98bb68c652


    Headers

    Imports

    Sections

  • Creal.pyc