General

  • Target

    Zentra 1.0.exe

  • Size

    16.5MB

  • MD5

    3d997e2b7c8426de181f40eae0ef1e82

  • SHA1

    13744398cb732cf973c497e592f93a7a9d5f9510

  • SHA256

    764ac07dbb5091c6c1d83b67f8f009a0bc1bb7f96db3b3461ad5175c466e0535

  • SHA512

    3a22276ae7208d27c6ce96064cd00c46a67a1644f1d80b291154e38880eefaa386fba0df835b2f31ee3a71c03188cf7be1958038cb05a30629d8dc9e4040c9b4

  • SSDEEP

    393216:Ju7L/jpUTLfhJjdQusl7Q+l9RoWOv+9faTwJAd9gvUq:JCLtUTLJRdQu2QGborvSitz

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zentra 1.0.exe
    .exe windows:5 windows x64 arch:x64

    1e92fd54d65284238a0e3b74b2715062


    Headers

    Imports

    Sections

  • Creal.pyc