General

  • Target

    Creal.exe

  • Size

    16.6MB

  • MD5

    7e3bc6e6c058cfc70033ba62ac026350

  • SHA1

    16c4c251dfeb6e3e914d167fc766194e90dbe304

  • SHA256

    6542308295ff6b80e525daafc799ee6e70f887b30c6b278da259f3fb9a846556

  • SHA512

    68f24871d4b8651070bb01398eff48d95d27c6b2307f33f0d74b25f31fbb9b5eb334930c082edc7087f125248dbedc1f7444cb6a5f7e4525e95f7527cdac5903

  • SSDEEP

    393216:mu7L/1VdQ2lN/m3pS+9J8ecH4K8zw4Jt8hXeSkM:mCLdVdQGKB9J8ecYK/P

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • Creal.pyc