Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NoisettesBlueprintsVIRUS.zip

  • Size

    474.4MB

  • MD5

    569971e847ad06827455234c0710d58a

  • SHA1

    f0840246b670f1350c05e08ef1d087eea51768e7

  • SHA256

    02555e6930fbca221da38d58f13af54c670d3c468545897bdde90aba12e8df9a

  • SHA512

    3c8cd6d6c383297881b142e049790396ab25e513bfe197a30d515f0824f29b97d4b12b55ace910b47b82fc77e5ef3b182dce8f43edb3a8a96c33889d63e38759

  • SSDEEP

    6291456:fDiCSrOOUFdGfLwCUEVb4Cd0s2tH4JfjTzXB+es8qfS3q4x88DEU+G9Ayg+SnNBb:fDiDOyU+Mc0IfjPX9gKaewUlCb7

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NoisettesBlueprintsVIRUS.zip
    .zip
  • NoisettesBlueprints/NoisettesBlueprints.exe
    .exe windows:5 windows x86 arch:x86

    fa2936ff523bbe01bb11c81e10c9ad2d


    Headers

    Imports

    Sections

  • Creal.pyc
  • NoisettesBlueprints/data.win
  • NoisettesBlueprints/options.ini