Extracted

• • Target

    Chrome.exe

  • Size

    9.4MB

  • MD5

    e2d364cf06651d253e151be263c6f1c3

  • SHA1

    9633116d44b2d8e7600e0f1313b24194e91a9ef3

  • SHA256

    17e5475fe29d1e9f486646f38adcb5749cfe73bc384ec7a926b6a5b08919ba41

  • SHA512

    c9261a9ca430949772a6d8959029851c2e600b9744f3d3a28020c443cf072ab92cb11025b01f9cd4bb492db5bd55f71340ff35ff6884d4babface3369c9d3523

  • SSDEEP

    196608:tLX8vpjby5OkoeYXp0leGQ7WWbR6otLwGwP55ar9kCmlwe1Xf/Ohz2+lnBVyGt:tIvxy58eYXm7Q7WWbR5L+5Mr9k3d1Xfs

  Score

  10^/10

  hijackloaderrhadamanthysdiscoveryloaderstealer

  • Detects HijackLoader (aka IDAT Loader)

  • HijackLoader

    HijackLoader is a multistage loader first seen in 2023.

    loaderhijackloader

  • Hijackloader family

    hijackloader

  • Rhadamanthys

    Rhadamanthys is an info stealer written in C++ first seen in August 2022.

    stealerrhadamanthys

  • Rhadamanthys family

    rhadamanthys

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1