General

  • Target

    index.exe

  • Size

    13.2MB

  • MD5

    b19ecc85f6fb66a7284923be049659cd

  • SHA1

    23d8ffbf1f0dd96538124c80481e7676bbd392fb

  • SHA256

    077fbfcf6bbc5690d8f7ad368a6414a0ca3ca4117d148e637b0ea07146c69809

  • SHA512

    e030cf7383f1ea05f9af400034e0f6673ecbda6f25a24ee98e467555cebf41b3ce56cf3e11c02af33baaa25293fd74a62a818cd81a08c40f2c600c41a53c2051

  • SSDEEP

    393216:iEkcqY4q1+TtIiF0Y9Z8D8Ccl6lnmEaUzlewA/Wm5R+:ikD4q1QtILa8DZcIlmgUd7z+

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • index.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc