General

  • Target
    a6471a2c254aa8b00a6202aa087c9a2b345a7927c0109a8900db273988ddb02d.lzh
  • Size 6.8MB
  • Sample260225-esth4agy5c
  • SHA256 a6471a2c254aa8b00a6202aa087c9a2b345a7927c0109a8900db273988ddb02d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • hijackloader

Attributes
  • directory

    %APPDATA%\extprompt

  • inject_dll

    %windir%\SysWOW64\input.dll

xor.hex

Signatures

  • Detects HijackLoader (aka IDAT Loader) 1 IoCs
  • Hijackloader family
  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

  • Insecure Codesign Algorithm 1 IoCs

    File was Codesigned using an insecure algorithm.

  • Untrusted Codesign Signers 4 IoCs

    Codesigned binary was signed by an untrusted entity.

File Explorer

  • a6471a2c254aa8b00a6202aa087c9a2b345a7927c0109a8900db273988ddb02d.lzh
    .7z 6.8MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/001_CITACION DEMANDA JUZGADO PENAL.PDF.exe
    .exe 467KB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/MSVCP140.dll
    .dll 439KB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Core.dll
    .dll 5.1MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Gui.dll
    .dll 5.7MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Network.dll
    .dll 1.1MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Widgets.dll
    .dll 4.4MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/Qt5Xml.dll
    .dll 150KB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/VCRUNTIME140.dll
    .dll 78KB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/proxy.json
    1.5MB
  • DOCUMENTOS DE JUZGADO PENAL CON FUNCION DE CONTROL DE GARANTIAS/sched.bin
    18KB

a6471a2c254aa8b00a6202aa087c9a2b345a7927c0109a8900db273988ddb02d.lzh

  • SHA256 a6471a2c254aa8b00a6202aa087c9a2b345a7927c0109a8900db273988ddb02d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
HTS735