Extracted

• • Target

    0x000b00000001e4ef-846

  • Size

    5.6MB

  • MD5

    f659a0d8ebd02ee8ee6eb70cef397cd7

  • SHA1

    78c4038cd147d6e14cb0255e7ff170d477e9eca4

  • SHA256

    307abb12c62dd8421cedfe6a11475e742caaae82faf9cb14d9812772edefe8d7

  • SHA512

    ae5275a56c782960d7d3efdd32d8458300b763114d040723b363f51dbd77ae6e371ef3d4081745feac202890284c77ddf8e796289a473eb43b998172b6eaddb9

  • SSDEEP

    98304:AUd98EKniqMUs8RVe0jHs4+b4EmeICxgHxC6qz1loJoYFqQ5dn6uqhAoCVtxnz+C:F8sn+RVJM44YCxwxmzLOFfdrq+P/xnCC

  Score

  10^/10

  hijackloaderstealcbenjiworld29discoveryloaderstealer

  • Detects HijackLoader (aka IDAT Loader)

  • HijackLoader

    HijackLoader is a multistage loader first seen in 2023.

    loaderhijackloader

  • Hijackloader family

    hijackloader

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Stealc family

    stealc

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2