General

  • Target

    231210-10-Creal-33652f.exe

  • Size

    17.0MB

  • MD5

    0b02e32e57e2345c026243f8f309f808

  • SHA1

    33652fd7b37d46d8de6a51b914568fc4b9a82411

  • SHA256

    7182c67494763b41a8ed5324ced374c1741e67197047d373e540c4c28ab9ac8e

  • SHA512

    1d87255fb2aeadc28ad539e40d7dc557053031242ac1aa47609597af1547f4ed1162af25811de4f38e48d5759b48f0ac01d36f5e71108200e4a405120f8e770b

  • SSDEEP

    393216:3iIE7YoPQJSpUTLfhJjdQuslSl99oWOv+9fgIIye9l9a1J:M7rPQEUTLJRdQu9DorvSYIIjl9O

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 231210-10-Creal-33652f.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc