General
- Target https://fitgirl-repacks.site/mouse-p-i-for-hire/
- Sample260508-pydd6scx2q
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://fitgirl-repacks.site/mouse-p-i-for-hire/
Resource
win11-20260130-en
22 signatures
900 seconds
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%APPDATA%\tool_net20_32_test
-
inject_dll
%windir%\SysWOW64\input.dll
xor.hex
Targets
-
- Target https://fitgirl-repacks.site/mouse-p-i-for-hire/
Score10/10Detects HijackLoader (aka IDAT Loader)
Family: HijackLoader, IDAT loader, Ghostulse,
HijackLoader is a multi-stage loader, first seen in 2023.
Executes dropped EXE
Loads dropped DLL
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.