General

  • Target
    SETUP.zip
  • Size 14.3MB
  • Sample251007-w6v3hsgn3z
  • SHA256 f9155f296b014294b9a0a83ae7bc0096b25f032d587cc6430bc3cfbbece82bc2
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\tnq6tpb

  • inject_dll

    %windir%\SysWOW64\pla.dll

xor.hex

Signatures

  • Detects HijackLoader (aka IDAT Loader) 1 IoCs
  • Hijackloader family
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Insecure Codesign Algorithm 3 IoCs

    File was Codesigned using an insecure algorithm.

File Explorer

  • SETUP.zip
    .zip 14.3MB
  • Bie.tbu
    792KB
  • LMIGuardianDll.dll
    .dll 13.1MB
  • Rawolkaick.ni
    28KB
  • Setup.exe
    .exe 395KB
  • updater/NvStWiz.prx
    .exe 432KB
  • updater/manager/ks_tyres.ini
    9KB
  • x64/trading_api64.dll
    .dll 282KB
  • x64/tradingnetworkingsockets.dll
    .dll 4.1MB
  • x86/api-ms-win-core-processthreads-l1-1-1.dll
    .dll 17KB
  • x86/api-ms-win-core-profile-l1-1-0.dll
    .dll 16KB
  • x86/api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-core-string-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-core-synch-l1-1-0.dll
    .dll 19KB
  • x86/api-ms-win-core-synch-l1-2-0.dll
    .dll 17KB
  • x86/api-ms-win-core-sysinfo-l1-1-0.dll
    .dll 18KB
  • x86/api-ms-win-core-timezone-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-core-util-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-crt-conio-l1-1-0.dll
    .dll 18KB
  • x86/api-ms-win-crt-convert-l1-1-0.dll
    .dll 21KB
  • x86/api-ms-win-crt-environment-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-crt-filesystem-l1-1-0.dll
    .dll 19KB
  • x86/api-ms-win-crt-heap-l1-1-0.dll
    .dll 18KB
  • x86/api-ms-win-crt-locale-l1-1-0.dll
    .dll 17KB
  • x86/api-ms-win-crt-math-l1-1-0.dll
    .dll 26KB
  • x86/api-ms-win-crt-multibyte-l1-1-0.dll
    .dll 25KB
  • x86/api-ms-win-crt-private-l1-1-0.dll
    .dll 68KB
  • x86/api-ms-win-crt-process-l1-1-0.dll
    .dll 18KB

SETUP.zip

  • SHA256 f9155f296b014294b9a0a83ae7bc0096b25f032d587cc6430bc3cfbbece82bc2
  • MD5 SHA1 SHA512 SSDEEP