General

  • Target

    Colorbotwritteninpy.exe

  • Size

    14.6MB

  • MD5

    897276fc553709ef67a4c17cef5f0b80

  • SHA1

    446f651bf0f1f20d71c145c6661cd2a308d7b8f6

  • SHA256

    4c012852b1f874922730c7b45fed0e2b8bd9566d8ae13c1c4222a7addc3b92da

  • SHA512

    3bf62309025aed6803c606193bdffa7abf4d6376c9b2d41209d11a08fc4202f82e644a006f22da06d054d2669bcefbfbf7108860ccec38972dafb6e05406f4da

  • SSDEEP

    393216:19Yi2Vlj87d9gdQuslSq9VoWOv+9fSZk1vwUrjLP2:19Yi2Vl8Z+dQuSTorvSKSFwUnLP2

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Colorbotwritteninpy.exe
    .exe windows:6 windows x64 arch:x64

    965e162fe6366ee377aa9bc80bdd5c65


    Headers

    Imports

    Sections

  • Creal.pyc