General

  • Target

    builder.exe

  • Size

    14.3MB

  • MD5

    0ad57b220794fa7ea977c2febf932710

  • SHA1

    fea4a079c63ac9c12efbd7e6e04d19d6cd8819a5

  • SHA256

    f41530b3fa407d4ad80f76356f939b85d70b0b95858608de8149c0e54331eeca

  • SHA512

    d420e8694d7c4209a0beff7927616053258858e04c2eba2000a30ced1721c96741a6b143a7a70edd882380a38608ccd874c376e4ceadcf0d47269fb060784a1b

  • SSDEEP

    393216:ku7L/sQQdQuslSq9RoWOv+9fggR6iM40Fe:kCL0QQdQuSborvSYgor9F

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • builder.exe
    .exe windows:5 windows x64 arch:x64

    Password: 123

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc