General
-
Target
hijackloader_stealc_new_hash.exe
-
Size
922KB
-
Sample
240619-1dstxasenf
-
MD5
8839a2699343f7756f66a81a6baea1a7
-
SHA1
589e64aacc11f8b530a8c5408d51ca65d103205b
-
SHA256
6d3da611ddf750a9445e040cfae4a6c09f333f18f124dedf42bd2235f9405406
-
SHA512
3cffd09b4a646c4e3e1b46f6d38b088df6ca74a40bccb2c807d4027bec9878813d246ec82e4ebb408eb9e497651fb80d86cfabc62251edb8068b4a2f1644db0d
-
SSDEEP
24576:e8inPEBCZN5hoVlnJXzJ/SEVSoMAALia4:Dg5BuxF/SRF4
Behavioral task
behavioral1
Sample
hijackloader_stealc_new_hash.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
stealc
cozy15
http://193.163.7.88
-
url_path
/a69d09b357e06b52.php
Targets
-
-
Target
hijackloader_stealc_new_hash.exe
-
Size
922KB
-
MD5
8839a2699343f7756f66a81a6baea1a7
-
SHA1
589e64aacc11f8b530a8c5408d51ca65d103205b
-
SHA256
6d3da611ddf750a9445e040cfae4a6c09f333f18f124dedf42bd2235f9405406
-
SHA512
3cffd09b4a646c4e3e1b46f6d38b088df6ca74a40bccb2c807d4027bec9878813d246ec82e4ebb408eb9e497651fb80d86cfabc62251edb8068b4a2f1644db0d
-
SSDEEP
24576:e8inPEBCZN5hoVlnJXzJ/SEVSoMAALia4:Dg5BuxF/SRF4
Score10/10-
Detects HijackLoader (aka IDAT Loader)
-
Deletes itself
-
Suspicious use of SetThreadContext
-