Overview

overview

10

Static

static

10

tmp-82264-...r3.exe

windows10-2004-x64

5

tmp-82264-...r3.exe

windows11-21h2-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    tmp-82264-zZnMrMaPDxcG.rar
  • Size 8.1MB
  • Sample260418-pgaxqahs41
  • SHA256 be7a19b4cfc7abe583f92bc6093ed47cf522245f224aecc192eb592845b14e01
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
hijackloaderdiscoveryloader

Malware Config

Extracted

Family

  • hijackloader

Attributes
  • directory

    %APPDATA%\advconnector

  • inject_dll

    %windir%\SysWOW64\input.dll

xor.hex

Targets

    • Target
      tmp-82264-zZnMrMaPDxcG/AA4JMc7r3.exe
    • Size 378KB
    • SHA256 7c7208fb37d889fbba299cee11677c7e6b1b4347eb01fde46ebb82dc839ad2a0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks