General

  • Target

    a.exe

  • Size

    19.4MB

  • MD5

    1f7dbf7131aa034ec16445a2f4f7dcd5

  • SHA1

    facdb79816af25d725d8035dc4bf6b52b76a8eb8

  • SHA256

    5f5308bcbbfa5b1627d8462b686d2566b2813c23d00b851fae774e8836185d71

  • SHA512

    82584e74578e2093606b512f07c172d76342b383556d728749d30182afeb807cc43ff6f05c9fada22d556eb4e84afbfeb4f856990a8ebcf099615af1bb7be055

  • SSDEEP

    393216:QiIE7YoPQtstQdq/Kmr2pu0tTtdQJluwF3MnG3oTl5iakBq1eZW3WpRZ5YHw:R7rPQtstqoKmr2puI5dQz3MGY3gZDyQ

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a.exe
    .exe windows:5 windows x64 arch:x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc