General

  • Target

    277a8c2b39819ce158d466bf415c1110N.exe

  • Size

    6.4MB

  • MD5

    277a8c2b39819ce158d466bf415c1110

  • SHA1

    6f5c1c14fa476d2e1d14b38c53539b9534f7462e

  • SHA256

    fd84e155da120cab6f9c5cf80f6dc2452ff622ccac4f747fcd80724e82ef7dfb

  • SHA512

    b04e2f9a85c01ddde4ba2f190f0fea2a5c8d5eefd454adae2c24a5bf43ef8140bff3eb37fd472f50bb6516ee02b71d2f3af7285ddd4ffc2385f87d5c77aa45a9

  • SSDEEP

    98304:1Wcb8jrtAv6nNpT8kkSxtkOsAm9im8j4la1B5qoJCZe4gAMo16DssXyfU70zU5uj:178NRnnOimFla1nJCZe4leYN2k+zc/

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 277a8c2b39819ce158d466bf415c1110N.exe
    .exe windows:5 windows x64 arch:x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • Creal.pyc