Extracted

• • Target
    mediafile.exe
  • Size 3.7MB
  • SHA256 1bcc15d694501be5846d278419ca76e86904fb83c0e2337a8fb18627a32204b4
  • MD5 be895bd5ac158111518ec50d41fcb871
  • SHA1 25bf30d6d13f93c762b6f341bc629c29d9722326
  • SHA512 fc65be37f401b7f373a502e340a42fd07db22d16583de906067c73a04398b8d99ffdc8d427024168c34fca3da93c71273c9b3b46eab383f9e8ed809d59711716
  • SSDEEP 98304:wOCG4h7FiRe7WkAbJ0rCmIZDfNJBechU/dUq:3o7vWkwnmIZDfNJBegc
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  hijackloaderstealcmeowsterioland13credential_accessdiscoveryloaderspywarestealer

  • Detects HijackLoader (aka IDAT Loader)

  • HijackLoader

    HijackLoader is a multistage loader first seen in 2023.

    loaderhijackloader

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2