General

  • Target
    #Pa$$w0rD__2025--0peɴ_Set-Up!.7z
  • Size 56.3MB
  • Sample250919-xmpbasfl4y
  • SHA256 5aff502c1a5ea267fed2a8f8ae63d512bc3a7eeedd7f36c94da93e6e6405b956
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\GEV_Validate

  • inject_dll

    %windir%\SysWOW64\pla.dll

xor.hex

Signatures

  • Detects HijackLoader (aka IDAT Loader) 1 IoCs
  • Hijackloader family
  • Codesign digest Mismatch 6 IoCs

    File was altered after it was signed.

  • DLL Hijacking vulnerability 6 IoCs

    Signed PE file loads submitted unsigned PE file, allowing DLL Hijacking/Side Loading.

  • Insecure Codesign Algorithm 5 IoCs

    File was Codesigned using an insecure algorithm.

  • Unsigned PE 191 IoCs

    Checks for missing Authenticode signature.

  • Untrusted Codesign Signers 11 IoCs

    Codesigned binary was signed by an untrusted entity.

File Explorer

  • #Pa$$w0rD__2025--0peɴ_Set-Up!.7z
    .7z 56.3MB
  • MSVCP110.dll
    .dll 522KB
  • MSVCR110.dll
    .dll 854KB
  • Mean.qjlu
    13KB
  • Thu.dc
    2.8MB
  • VCOMP110.DLL
    .dll 122KB
  • Zxl.dll
    .dll 9.1MB
  • bin/.cef-dev-tools-size.vdf
    71B
  • bin/7z-x64.dll
    .dll 1.8MB
  • bin/ACPBackgroundManagerPolicy.dll
    .dll 195KB
  • bin/AJRouter.dll
    .dll 24KB
  • bin/APMon.dll
    .dll 1.2MB
  • bin/AUDIOKSE.dll
    .dll 410KB
  • bin/AboutSettingsHandlers.dll
    .dll 405KB
  • bin/AboveLockAppHost.dll
    .dll 391KB
  • bin/AcGenral.dll
    .dll 344KB
  • bin/AcLayers.dll
    .dll 307KB
  • bin/AcSpecfc.dll
    .dll 63KB
  • bin/AcWinRT.dll
    .dll 32KB
  • bin/AcXtrnal.dll
    .dll 15KB
  • bin/ActionCenter.dll
    .dll 306KB
  • bin/ActionCenterCPL.dll
    .dll 547KB
  • bin/ActionMgr.dll
    .dll 71KB
  • bin/ActionQueue.dll
    .dll 184KB
  • bin/ActivationClient.dll
    .dll 55KB
  • bin/ActivationManager.dll
    .dll 679KB
  • bin/AdaptiveCards.dll
    .dll 1.2MB
  • bin/AddressParser.dll
    .dll 66KB
  • bin/AdmTmpl.dll
    .dll 522KB
  • bin/ApiSetHost.AppExecutionAlias.dll
    .dll 85KB
  • bin/AppContracts.dll
    .dll 900KB
  • bin/AppExtension.dll
    .dll 175KB
  • bin/AppIdPolicyEngineApi.dll
    .dll 395KB
  • bin/AppLockerCSP.dll
    .dll 374KB
  • bin/AppManagementConfiguration.dll
    .dll 146KB
  • bin/AppReadiness.dll
    .dll 685KB
  • bin/AppResolver.dll
    .dll 578KB
  • bin/AppVCatalog.dll
    .dll 652KB
  • bin/AppVClientPS.dll
    .dll 41KB
  • bin/AppVEntStreamingManager.dll
    .dll 798KB
  • bin/AppVEntSubsystemController.dll
    .dll 1.3MB
  • bin/AppVEntSubsystems64.dll
    .dll 2.1MB
  • bin/AppVEntVirtualization.dll
    .dll 1.6MB
  • bin/AppVFileSystemMetadata.dll
    .dll 252KB
  • bin/AppVIntegration.dll
    .dll 1.5MB
  • bin/AppVManifest.dll
    .dll 937KB
  • bin/AppVOrchestration.dll
    .dll 810KB
  • bin/AppVPolicy.dll
    .dll 1021KB
  • bin/AppVPublishing.dll
    .dll 635KB
  • bin/AppVReporting.dll
    .dll 727KB
  • bin/AppVScripting.dll
    .dll 387KB
  • bin/AppVSentinel.dll
    .dll 15KB
  • bin/AppVStreamMap.dll
    .dll 224KB
  • bin/AppVStreamingUX.dll
    .dll 198KB
  • bin/AppVTerminator.dll
    .dll 20KB
  • bin/AppXApplicabilityBlob.dll
    .dll 202KB
  • bin/AppXDeploymentClient.dll
    .dll 846KB
  • bin/AppXDeploymentExtensions.desktop.dll
    .dll 1.5MB
  • bin/AppXDeploymentExtensions.onecore.dll
    .dll 2.1MB
  • bin/AppXDeploymentExtensions.server.dll
    .dll 440KB
  • bin/AppXDeploymentServer.dll
    .dll 3.3MB
  • bin/Apphlpdm.dll
    .dll 33KB
  • bin/ApplicationFrame.dll
    .dll 648KB
  • bin/AppointmentActivation.dll
    .dll 141KB
  • bin/AppointmentApis.dll
    .dll 763KB
  • bin/AppvClientEventLog.dll
    .dll 219KB
  • bin/AppxAllUserStore.dll
    .dll 337KB
  • bin/AppxApplicabilityEngine.dll
    .dll 220KB
  • bin/AppxPackaging.dll
    .dll 1.6MB
  • bin/AppxProvisioning.xml
    .xml 2KB
  • bin/AppxSip.dll
    .dll 264KB
  • bin/AppxStreamingDataSourcePS.dll
    .dll 19KB
  • bin/AppxSysprep.dll
    .dll 123KB
  • bin/AssignedAccessRuntime.dll
    .dll 59KB
  • bin/AtBroker.exe
    .exe 92KB
  • bin/AudioEndpointBuilder.dll
    .dll 732KB
  • bin/AudioEng.dll
    .dll 2.0MB
  • bin/AudioHandlers.dll
    .dll 351KB
  • bin/AudioSes.dll
    .dll 1.3MB
  • bin/AudioSrvPolicyManager.dll
    .dll 339KB
  • bin/AuditNativeSnapIn.dll
    .dll 218KB
  • bin/AuditPolicyGPInterop.dll
    .dll 72KB
  • bin/AuthBroker.dll
    .dll 202KB
  • bin/AuthBrokerUI.dll
    .dll 108KB
  • bin/AuthExt.dll
    .dll 65KB
  • bin/AuthFWGP.dll
    .dll 298KB
  • bin/AuthFWSnapin.dll
    .dll 4.9MB
  • bin/AuthFWWizFwk.dll
    .dll 110KB
  • bin/AuthHostProxy.dll
    .dll 18KB
  • bin/AverageRoom.bin
    134KB
  • bin/AxInstSv.dll
    .dll 140KB
  • bin/AzSqlExt.dll
    .dll 30KB
  • bin/AzureSettingSyncProvider.dll
    .dll 1.8MB
  • bin/BCP47Langs.dll
    .dll 358KB
  • bin/BCP47mrm.dll
    .dll 156KB
  • bin/BFE.DLL
    .dll 866KB
  • bin/BLAKEX64.DLL
    .dll 158KB
  • bin/BOOTVID.DLL
    .dll 25KB
  • bin/BPAInst.dll
    .dll 7KB
  • bin/BTAGService.dll
    .dll 543KB
  • bin/BackgroundMediaPolicy.dll
    .dll 65KB
  • bin/BamSettingsClient.dll
    .dll 15KB
  • bin/BcastDVRBroker.dll
    .dll 105KB
  • bin/BcastDVRClient.dll
    .dll 468KB
  • bin/BcastDVRCommon.dll
    .dll 228KB
  • bin/BingASDS.dll
    .dll 352KB
  • bin/BingFilterDS.dll
    .dll 95KB
  • bin/BingOnlineServices.dll
    .dll 881KB
  • bin/BioCredProv.dll
    .dll 340KB
  • bin/BitLockerCsp.dll
    .dll 226KB
  • bin/BitsProxy.dll
    .dll 63KB
  • bin/BlbEvents.dll
    .dll 76KB
  • bin/BluetoothApis.dll
    .dll 193KB
  • bin/BluetoothDesktopHandlers.dll
    .dll 63KB
  • bin/BootMenuUX.dll
    .dll 647KB
  • bin/BrokerLib.dll
    .dll 237KB
  • bin/Brotli-license.txt
    1KB
  • bin/BthAvctpSvc.dll
    .dll 372KB
  • bin/BthAvrcp.dll
    .dll 343KB
  • bin/BthAvrcpAppSvc.dll
    .dll 60KB
  • bin/BthMtpContextHandler.dll
    .dll 33KB
  • bin/BthRadioMedia.dll
    .dll 105KB
  • bin/BthTelemetry.dll
    .dll 30KB
  • bin/BthpanContextHandler.dll
    .dll 182KB
  • bin/CGLPT64.SYS
    .sys 23KB
  • bin/CSERHelper.dll
    .dll 121KB
  • bin/DEFAULT.BAR
    977B
  • bin/DESCRIPT.ION
    2KB
  • bin/GameOverlayRenderer.dll
    .dll 1.2MB
  • bin/GameOverlayRenderer64.dll
    .dll 1.4MB
  • bin/GfnRuntimeSdk.dll
    .dll 2.5MB
  • bin/HISTORY.TXT
    1.1MB
  • bin/IDMEdgeExt.crx
    .zip 101KB
  • bin/IDMFType.dat
    180KB
  • bin/IDMFType64.dll
    .dll 51KB
  • bin/IDMGCExt.crx
    .zip 109KB
  • bin/IDMGCExt59.crx
    .zip 95KB
  • bin/IDMGetAll.dll
    .dll 73KB
  • bin/IDMGetAll64.dll
    .dll 93KB
  • bin/IDMIECC.dll
    .dll 463KB
  • bin/IDMIECC64.dll
    .dll 656KB
  • bin/IDMMsgHost.json
    351B
  • bin/IDMMsgHostMoz.json
    282B
  • bin/IDMNetMon.dll
    .dll 448KB
  • bin/IDMNetMon64.dll
    .dll 522KB
  • bin/IDMOpExt.nex
    .zip 95KB
  • bin/IDMSetup2.log
    29KB
  • bin/IDMShellExt.dll
    .dll 33KB
  • bin/IDMShellExt64.dll
    .dll 36KB
  • bin/IDMVMPrs.dll
    .dll 329KB
  • bin/IDMVMPrs64.dll
    .dll 400KB
  • bin/IEExt.htm
    .html .vbs 277B
  • bin/IEGetAll.htm
    .html .vbs 283B
  • bin/IEGetVL.htm
    .html .vbs 278B
  • bin/IEGetVL2.htm
    .html .vbs 279B
  • bin/KEYBOARD.TXT
    12KB
  • bin/LIBDEFLATE64.DLL
    .dll 153KB
  • bin/MACDll.DLL
    .dll 162KB
  • bin/NO.BAR
    26B
  • bin/PWRISOSH.DLL
    .dll 362KB
  • bin/PowerISO.chm
    .chm 445KB
  • bin/Readme.txt
    2KB
  • bin/SDL3.dll
    .dll 2.0MB
  • bin/SDL3_image.dll
    .dll 665KB
  • bin/SDL3_ttf.dll
    .dll 2.2MB
  • bin/SFXHEAD.SFX
    .exe 40KB
  • bin/Settings.xml
    536B
  • bin/StandardProfile.xml
    2KB
  • bin/Steam.dll
    .dll 506KB
  • bin/Steam2.dll
    .dll 2.7MB
  • bin/SteamFossilizeVulkanLayer.json
    694B
  • bin/SteamFossilizeVulkanLayer64.json
    696B
  • bin/SteamOverlayVulkanLayer.dll
    .dll 247KB
  • bin/SteamOverlayVulkanLayer.json
    482B
  • bin/SteamOverlayVulkanLayer64.dll
    .dll 296KB
  • bin/SteamOverlayVulkanLayer64.json
    484B
  • bin/TC7Z64.DLL
    .dll 334KB
  • bin/TCLZMA64.DLL
    .dll 276KB
  • bin/TCUNIN64.WUL
    2KB
  • bin/TCUNINST.WUL
    560B
  • bin/TCUNZL64.DLL
    .dll 166KB
  • bin/TCZSTD64.DLL
    .dll 242KB
  • bin/TCshareWin10x64.dll
    .dll 166KB
  • bin/TOTALCMD.CHM
    .chm 572KB
  • bin/TOTALCMD.INC
    29KB
  • bin/TOTALCMD64.EXE.MANIFEST
    .xml 1KB
  • bin/ThirdPartyLegalNotices.css
    405B
  • bin/ThirdPartyLegalNotices.html
    .html 198KB
  • bin/Toolbar/3d_largeHot_3.bmp
    110KB
  • bin/Toolbar/3d_largeHot_3_hdpi15.bmp
    248KB
  • bin/Toolbar/3d_large_3.bmp
    110KB
  • bin/Toolbar/3d_large_3_hdpi15.bmp
    248KB
  • bin/Toolbar/3d_smallHot_3.bmp
    48KB
  • bin/Toolbar/3d_small_3.bmp
    48KB
  • bin/Toolbar/3d_style_3.tbi
    180B
  • bin/Traffic.dat
    3B
  • bin/UNRAR64.DLL
    .dll 330KB
  • bin/VERTICAL.BAR
    417B
  • bin/VkLayer_steam_fossilize.dll
    .dll 492KB
  • bin/VkLayer_steam_fossilize64.dll
    .dll 595KB
  • bin/WCMICON2.DLL
    .dll 1.5MB
  • bin/WCMICONS.DLL
    .exe 623KB
  • bin/WCMICONS.INC
    1KB
  • bin/WCMZIP64.DLL
    .dll 169KB
  • bin/WCUNINST.WUL
    106B
  • bin/aadWamExtension.dll
    .dll 144KB
  • bin/aadcloudap.dll
    .dll 708KB
  • bin/aadtb.dll
    .dll 1.8MB
  • bin/accessibilitycpl.dll
    .dll 3.7MB
  • bin/acledit.dll
    .dll 11KB
  • bin/aclui.dll
    .dll 5.2MB
  • bin/acmigration.dll
    .dll 380KB
  • bin/acppage.dll
    .dll 80KB
  • bin/acproxy.dll
    .dll 12KB
  • bin/activeds.dll
    .dll 259KB
  • bin/activeds.tlb
    .dll 109KB
  • bin/actxprxy.dll
    .dll 598KB
  • bin/adhapi.dll
    .dll 23KB
  • bin/adhsvc.dll
    .dll 95KB
  • bin/admwprox.dll
    .dll 54KB
  • bin/adprovider.dll
    .dll 57KB
  • bin/adrclient.dll
    .dll 133KB
  • bin/adsldp.dll
    .dll 244KB
  • bin/adsldpc.dll
    .dll 247KB
  • bin/adsmsext.dll
    .dll 99KB
  • bin/adsnt.dll
    .dll 369KB
  • bin/adtschema.dll
    .dll 879KB
  • bin/advapi32.dll
    .dll 663KB
  • bin/advapi32res.dll
    .dll 2KB
  • bin/advpack.dll
    .dll 141KB
  • bin/aeevts.dll
    .dll 30KB
  • bin/aeinv.dll
    .dll 832KB
  • bin/aepic.dll
    .dll 584KB
  • bin/ahadmin.dll
    .dll 52KB
  • bin/altspace.dll
    .dll 159KB
  • bin/amcompat.tlb
    .dll 18KB
  • bin/amsi.dll
    .dll 70KB
  • bin/amsiproxy.dll
    .dll 14KB
  • bin/amstream.dll
    .dll 96KB
  • bin/apds.dll
    .dll 246KB
  • bin/apisetschema.dll
    .dll 114KB
  • bin/apphelp.dll
    .dll 541KB
  • bin/appidapi.dll
    .dll 63KB
  • bin/appidsvc.dll
    .dll 76KB
  • bin/appinfo.dll
    .dll 172KB
  • bin/appinfoext.dll
    .dll 12KB
  • bin/appmgmts.dll
    .dll 194KB
  • bin/appmgr.dll
    .dll 483KB
  • bin/appraiser.dll
    .dll 1.9MB
  • bin/apprepapi.dll
    .dll 12KB
  • bin/appsruprov.dll
    .dll 174KB
  • bin/appverif.chm
    .chm 637KB
  • bin/appverifUI.dll
    .dll 157KB
  • bin/appvetwclientres.dll
    .dll 130KB
  • bin/appvetwsharedperformance.dll
    .dll 219KB
  • bin/appvetwstreamingux.dll
    .dll 13KB
  • bin/appwiz.cpl
    .dll 913KB
  • bin/archiveint.dll
    .dll 657KB
  • bin/asferror.dll
    .dll 2KB
  • bin/aspnet_counters.dll
    .dll 32KB
  • bin/aspperf.dll
    .dll 28KB
  • bin/asycfilt.dll
    .dll 87KB
  • bin/atl.dll
    .dll 95KB
  • bin/atlthunk.dll
    .dll 40KB
  • bin/atmlib.dll
    .dll 46KB
  • bin/audioresourceregistrar.dll
    .dll 56KB
  • bin/audiosrv.dll
    .dll 1.8MB
  • bin/auditcse.dll
    .dll 194KB
  • bin/auditpolcore.dll
    .dll 70KB
  • bin/auditpolmsg.dll
    .dll 93KB
  • bin/authfwcfg.dll
    .dll 514KB
  • bin/authui.dll
    .dll 500KB
  • bin/authz.dll
    .dll 287KB
  • bin/autoplay.dll
    .dll 162KB
  • bin/avicap32.dll
    .dll 78KB
  • bin/avifil32.dll
    .dll 113KB
  • bin/avrt.dll
    .dll 29KB
  • bin/azroles.dll
    .dll 873KB
  • bin/azroleui.dll
    .dll 418KB
  • bin/basecsp.dll
    .dll 207KB
  • bin/basesrv.dll
    .dll 63KB
  • bin/batmeter.dll
    .dll 1.6MB
  • bin/bcastdvr.proxy.dll
    .dll 254KB
  • bin/bcd.dll
    .dll 119KB
  • bin/bcdprov.dll
    .dll 75KB
  • bin/bcdsrv.dll
    .dll 85KB
  • bin/bcrypt.dll
    .dll 141KB
  • bin/bcryptprimitives.dll
    .dll 518KB
  • bin/bdaplgin.ax
    .dll 95KB
  • bin/bi.dll
    .dll 29KB
  • bin/bidispl.dll
    .dll 64KB
  • bin/bindfltapi.dll
    .dll 17KB
  • bin/bisrv.dll
    .dll 816KB
  • bin/bitsigd.dll
    .dll 80KB
  • bin/bitsperf.dll
    .dll 29KB
  • bin/biwinrt.dll
    .dll 312KB
  • bin/blb_ps.dll
    .dll 65KB
  • bin/blbres.dll
    .dll 2KB
  • bin/blbuires.dll
    .dll 301KB
  • bin/boot.sdi
    3.0MB
  • bin/bootstr.dll
    .dll 3KB
  • bin/bootux.dll
    .dll 3.8MB
  • bin/bopomofo.uce
    22KB
  • bin/bridgeres.dll
    .dll 2KB
  • bin/browcli.dll
    .dll 56KB
  • bin/browserbroker.dll
    .dll 276KB
  • bin/browseui.dll
    .dll 14KB
  • bin/bthci.dll
    .dll 113KB
  • bin/bthpanapi.dll
    .dll 30KB
  • bin/bthprops.cpl
    .dll 255KB
  • bin/bthserv.dll
    .dll 192KB
  • bin/crashhandler.dll
    .dll 362KB
  • bin/crashhandler64.dll
    .dll 464KB
  • bin/d3dcompiler_46.dll
    .dll 3.1MB
  • bin/d3dcompiler_46_64.dll
    .dll 3.7MB
  • bin/dav1d.dll
    .dll 1.0MB
  • bin/default.br2
    20KB
  • bin/defexclist.txt
    3KB
  • bin/downlWithIDM.dll
    .dll 197KB
  • bin/downlWithIDM64.dll
    .dll 155KB
  • bin/fossilize_engine_filters.json
    816B
  • bin/grabber.chm
    .chm 129KB
  • bin/idmBroker.exe
    .exe 153KB
  • bin/idman.chm
    .chm 313KB
  • bin/idmantypeinfo.tlb
    2KB
  • bin/idmbrbtn.dll
    .dll 228KB
  • bin/idmbrbtn64.dll
    .dll 240KB
  • bin/idmcchandler2.dll
    .dll 326KB
  • bin/idmcchandler2_64.dll
    .dll 451KB
  • bin/idmcchandler7.dll
    .dll 395KB
  • bin/idmcchandler7_64.dll
    .dll 736KB
  • bin/idmfc.dat
    4KB
  • bin/idmfsa.dll
    .dll 90KB
  • bin/idmftype.dll
    .dll 42KB
  • bin/idmindex.dll
    .dll 427KB
  • bin/idmmkb.dll
    .dll 33KB
  • bin/idmmzcc.xpi
    .zip 419KB
  • bin/idmmzcc2.xpi
    .zip 29KB
  • bin/idmmzcc3.xpi
    .zip 106KB
  • bin/idmmzcc7.dll
    .dll 27KB
  • bin/idmmzcc7_64.dll
    .dll 104KB
  • bin/idmnmcl.dll
    .dll 39KB
  • bin/idmtdi.cat
    17KB
  • bin/idmtdi.inf
    2KB
  • bin/idmtdi32.sys
    .sys 141KB
  • bin/idmtdi64.sys
    .sys 226KB
  • bin/idmvconv.dll
    .dll 740KB
  • bin/idmvs.dll
    .dll 20KB
  • bin/idmwfp.cat
    12KB
  • bin/idmwfp.inf
    2KB
  • bin/idmwfp32.sys
    .sys 141KB
  • bin/idmwfp64.sys
    .sys 169KB
  • bin/lame_enc.dll
    .dll 369KB
  • bin/libFLAC.DLL
    .dll 236KB
  • bin/libavcodec-61.dll
    .dll 5.1MB
  • bin/libavfilter-10.dll
    .dll 854KB
  • bin/libavformat-61.dll
    .dll 1.6MB
  • bin/libavif-16.dll
    .dll 685KB
  • bin/libavutil-59.dll
    .dll 1.6MB
  • bin/libcrypto.dll
    .dll 1.7MB
  • bin/libeay32.dll
    .dll 1.2MB
  • bin/libssl.dll
    .dll 382KB
  • bin/libswresample-5.dll
    .dll 615KB
  • bin/libswscale-8.dll
    .dll 1.0MB
  • bin/libvorbis.DLL
    .dll 1.7MB
  • bin/libx264-142.dll.crypt
    855KB
  • bin/libx264-142.dll.md5
    32B
  • bin/license.txt
    3KB
  • bin/oldjsproxy.dll
    .dll 44KB
  • bin/openssl-license.txt
    11KB
  • bin/openvr_api.dll
    .dll 612KB
  • bin/scheduler.chm
    .chm 44KB
  • bin/ssleay32.dll
    .dll 297KB
  • bin/steam.exe
    .exe 4.2MB
  • bin/steam.exe.old
    .exe 4.2MB
  • bin/steam.signatures
    3KB
  • bin/steamwebrtc.dll
    .dll 4.5MB
  • bin/tier0_s.dll
    .dll 351KB
  • bin/tier0_s64.dll
    .dll 412KB
  • bin/tips.txt
    2KB
  • bin/tutor.chm
    .chm 49KB
  • bin/vertical.br2
    6KB
  • bin/video.dll
    .dll 3.8MB
  • bin/vstdlib_s.dll
    .dll 564KB
  • bin/vstdlib_s64.dll
    .dll 458KB
  • ippcc-7.0.dll
    .dll 126KB
  • ippccg9-7.0.dll
    .dll 2.1MB
  • ippcore-7.0.dll
    .dll 134KB
  • ippi-7.0.dll
    .dll 386KB
  • ippig9-7.0.dll
    .dll 14.4MB
  • libiomp5md.dll
    .dll 738KB
  • zcl.dll
    .dll 542KB
  • zpsres.US.dll
    .dll 618KB
  • 𝗦𝗘𝗧𝗨𝗣.exe
    .exe 96KB

#Pa$$w0rD__2025--0peɴ_Set-Up!.7z

  • SHA256 5aff502c1a5ea267fed2a8f8ae63d512bc3a7eeedd7f36c94da93e6e6405b956
  • MD5 SHA1 SHA512 SSDEEP
Password
2025