Resubmissions

09/10/2024, 15:25

241009-stsvvaxhjj10

09/10/2024, 15:15

241009-sm4nrssckf10

General

  • Target
    facturagm-27725407957355783426.zip
  • Size 49.2MB
  • Sample241009-sm4nrssckf
  • SHA256 48fa854012e6abef23589909ec3293efc3df0ab2b5ef4406ccaf7ee0b68464c6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      facturagm-27725407957355783426.zip
    • Size 49.2MB
    • SHA256 48fa854012e6abef23589909ec3293efc3df0ab2b5ef4406ccaf7ee0b68464c6
    • MD5 SHA1 SHA512 SSDEEP
    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks