General
-
Target
msi (4).msi
-
Size
6.2MB
-
MD5
391f67eb98c7f707cb94a070b74400b6
-
SHA1
ed2e0e03a19fade042fb7f4be2d305987075711f
-
SHA256
1d487d11f8e3c45d76a260e4995b79f3cceca02942d9e426970eb560530c6c09
-
SHA512
3089441646ebcfc9d49c55322020433b03ccce7e8826960bf6415b593796418505470b63d7506a34ce025c578992910dafb34bc44f73ed87d8f82d973cc9c85e
-
SSDEEP
98304:1RJYyhcOqGU0xyoZ3lSby0it97V6NGaS6F4Kt56TchTV3uAJ69Xt:TSyvrjXtFIS6F44ccxV3uAMXt
Score
10/10
Malware Config
Extracted
Family
hijackloader
Attributes
-
directory
%APPDATA%\ReaderOracle
-
inject_dll
%windir%\SysWOW64\pla.dll
xor.hex
Signatures
-
Hijackloader family
Files
-
msi (4).msi.msi