Overview

overview

10

Static

static

10

winlogonhelp.exe

windows7-x64

7

winlogonhelp.exe

windows10-2004-x64

7

Resubmissions

27-10-2023 22:15

231027-158z7sac7t 10

27-10-2023 22:11

231027-14fl9sca74 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winlogonhelp.exe

  • Size

    14.4MB

  • MD5

    883659842ddff81d80972bbb9741f1c6

  • SHA1

    816ef1e3b4bb2bcf09a287c8e782834edabf0e29

  • SHA256

    a0e608801566feb6f2597aed98eed1ace8093bd1400e0172ce214d3c37fa8f2a

  • SHA512

    378690f932c5fe12f059f70dc7abe6667da07f18b7ca18093b398b254a6921fe0f0a969d504b494e880cdaad11f839c8369e20b8a67d3420e0a7bacd0f3cddff

  • SSDEEP

    393216:JiIE7YoPQbjdQuslSq99oWOv+9fgF9spY4Je:W7rPQ3dQuSDorvSYPsp9J

Score
10/10
pyinstallercrealstealer

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
    crealstealer
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winlogonhelp.exe
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • Creal.pyc