2024-10-21_827f627aaef021cc65eba223886d34a9_hiddentear_hijackloader

Sharing

Copy URL

Twitter E-mail

General

Target

2024-10-21_827f627aaef021cc65eba223886d34a9_hiddentear_hijackloader
Size

356KB
MD5

827f627aaef021cc65eba223886d34a9
SHA1

8563f056bbaf6e7e3ff8e60c3a1636f385fc8d46
SHA256

44ad90c5c9b26eb57351d420ec793353473c8f382dc4cb426c40e4bca4790da4
SHA512

c26f620ec974a95244355c28b0d3677d45b48e6751ad1548fb6d27c96df9c32a20c636a86350c07e402676bc242c755abad739917c7fad03ea37aa989045b37a
SSDEEP

6144:UlnGb9TlQ7GpimbKztK6euuEeLBBAl1e+o7B+lDAAj:QMk7GV2M6eu+idAAj

Score

1^/10

Malware Config

Signatures

Files

2024-10-21_827f627aaef021cc65eba223886d34a9_hiddentear_hijackloader
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8d
Certificate

Issuer

CN=Moscow Z LLC,OU=666,O=Bitrix,L=Mountian,ST=Russia,C=Z

Not Before

15-10-2024 06:01

Not After

15-10-2025 00:00

Subject

CN=Moscow Z LLC,OU=666,O=Bitrix,L=Mountian,ST=Russia,C=Z

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26-09-2024 00:00

Not After

25-11-2035 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8d
Certificate

Issuer

CN=Moscow Z LLC,OU=666,O=Bitrix,L=Mountian,ST=Russia,C=Z

Not Before

15-10-2024 06:01

Not After

15-10-2025 00:00

Subject

CN=Moscow Z LLC,OU=666,O=Bitrix,L=Mountian,ST=Russia,C=Z

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

26-09-2024 00:00

Not After

25-11-2035 23:59

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

af:7c:86:4c:04:dd:ce:79:16:ca:29:59:12:0a:3e:c9:64:85:17:22:7b:62:3c:39:36:8c:30:b5:11:9e:1e:2d
Signer

Actual PE Digest

af:7c:86:4c:04:dd:ce:79:16:ca:29:59:12:0a:3e:c9:64:85:17:22:7b:62:3c:39:36:8c:30:b5:11:9e:1e:2d

Digest Algorithm

sha256

PE Digest Matches

true

1a:74:81:88:84:f2:d2:71:73:46:e3:15:17:55:17:7b:7e:5b:93:e5
Signer

Actual PE Digest

1a:74:81:88:84:f2:d2:71:73:46:e3:15:17:55:17:7b:7e:5b:93:e5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8dCertificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04Certificate

Extended Key Usages

Key Usages

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8dCertificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

af:7c:86:4c:04:dd:ce:79:16:ca:29:59:12:0a:3e:c9:64:85:17:22:7b:62:3c:39:36:8c:30:b5:11:9e:1e:2dSigner

1a:74:81:88:84:f2:d2:71:73:46:e3:15:17:55:17:7b:7e:5b:93:e5Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 242KB - Virtual size: 241KB

.rsrc Size: 99KB - Virtual size: 99KB

.reloc Size: 512B - Virtual size: 12B

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8d
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

07:b9:4d:c8:74:2a:0b:40:b3:ad:bb:5b:a9:da:9f:8d
Certificate

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

af:7c:86:4c:04:dd:ce:79:16:ca:29:59:12:0a:3e:c9:64:85:17:22:7b:62:3c:39:36:8c:30:b5:11:9e:1e:2d
Signer

1a:74:81:88:84:f2:d2:71:73:46:e3:15:17:55:17:7b:7e:5b:93:e5
Signer

.text
Size: 242KB - Virtual size: 241KB

.rsrc
Size: 99KB - Virtual size: 99KB

.reloc
Size: 512B - Virtual size: 12B