hijackloader | bf206a8a3b7079e0593ad68a19cfc5dac664dab879283c2cb43f94b6c93e0af2 | Triage™

Login
Reports

Overview

overview

Static

static

ENVIO DOCU...AL.exe

windows10-2004-x64

7

ENVIO DOCU...AL.exe

windows11-ltsc_2024-x64

7

ENVIO DOCU...re.dll

windows10-2004-x64

3

ENVIO DOCU...re.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...ui.dll

windows10-2004-x64

3

ENVIO DOCU...ui.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...rk.dll

windows10-2004-x64

3

ENVIO DOCU...rk.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...vg.dll

windows10-2004-x64

3

ENVIO DOCU...vg.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...ts.dll

windows10-2004-x64

3

ENVIO DOCU...ts.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...ml.dll

windows10-2004-x64

3

ENVIO DOCU...ml.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...40.dll

windows10-2004-x64

3

ENVIO DOCU...40.dll

windows11-ltsc_2024-x64

3

ENVIO DOCU...in.dll

windows10-2004-x64

3

ENVIO DOCU...se.dll

windows10-2004-x64

3

ENVIO DOCU...40.dll

windows10-2004-x64

3

ENVIO DOCU...40.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
bf206a8a3b7079e0593ad68a19cfc5dac664dab879283c2cb43f94b6c93e0af2.rar
Size 7.1MB
Sample260806-tfcgdavfjc
SHA256 bf206a8a3b7079e0593ad68a19cfc5dac664dab879283c2cb43f94b6c93e0af2
MD5 eae1de986c24997cd51da94aa06f0a52
SHA1 69132899478e5dd5c31b194da77d7264ff2767e9
SHA512 9c763e427041d8eef8307531d28bb48b1de0253cfd8cfdaa4badaea574946e3adcce01c58d8f930594d13886ec912cc3c74ed8ee01618a242a4f644bfb974499
SSDEEP 196608:FrwIRlLLSmGuNqMtZGhNT0wOJRRAN4vJGe:DHeuN3tZ2xgQ49
TLSH
T19E76334DB5337B0E2194E83F904D06BDDABABD48A1CB8CD97306BD3BA5C6C456523A07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

hijackloader discovery loader

Static task

static1

4 signatures

loader hijackloader

Behavioral task

behavioral1

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/001_NOTIFICACION JUDICIAL.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

180 seconds

Behavioral task

behavioral2

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/001_NOTIFICACION JUDICIAL.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

180 seconds

Behavioral task

behavioral3

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Core.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral4

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Core.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Behavioral task

behavioral5

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Gui.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

180 seconds

Behavioral task

behavioral6

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Gui.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

180 seconds

Behavioral task

behavioral7

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Network.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

180 seconds

Behavioral task

behavioral8

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Network.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

180 seconds

Behavioral task

behavioral9

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Svg.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral10

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Svg.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Behavioral task

behavioral11

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Widgets.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral12

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Widgets.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Behavioral task

behavioral13

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Xml.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral14

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Xml.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Behavioral task

behavioral15

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/msvcp140.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral16

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/msvcp140.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Behavioral task

behavioral17

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/msvcp_win.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral18

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/ucrtbase.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

180 seconds

Behavioral task

behavioral19

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/vcruntime140.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

180 seconds

Behavioral task

behavioral20

Sample

ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/vcruntime140.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

180 seconds

Malware Config

Extracted

Family

hijackloader

Attributes

directory
%APPDATA%\nodeproc_v8
inject_dll
%windir%\SysWOW64\input.dll

xor.hex

Targets

- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/001_NOTIFICACION JUDICIAL.exe
- Size 1022KB
- SHA256 73c6609d9d2cbb935802d47c09612dc2ca92e064b7d27ec3164a1623d9fcbdc9
- MD5 0abb4a16f75f3e82da200e015daf831f
- SHA1 3568264460045858ce30bac7cf2c19cbb1622457
- SHA512 2bde14464118728a8e4ea9e4c316699b90d8013dd43bcdd09039367ff023573e16ef7db41273e855839854d7021a3268978119f9bba9d61e93d975cae5ffcc37
- SSDEEP 12288:nfbQn88shYV/RfB92ragJ+tI4MMMMMMf8XRDq1QNHQ/luq/s4b4:nsn888YVv+jJb4MMMMMMf8XBaVG4b4
- TLSH
  T1F5253A726718F03EC16EA2F30D2496FA44249D91DBB069C3A2C87B5E15F1ED25E3790E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Core.dll
- Size 4.9MB
- SHA256 39abff2f61549f8ba27bfea5f862f750fa7a63bf73b3d757f47c6e868bcb83be
- MD5 7e65e6a61b235193bc37baa09f5ff1f5
- SHA1 2468ef97e326c441d0dda928ee9444700b60e1d3
- SHA512 530d56935a6105b279e5d13f12d1f4f069bd377738d0b0890c7d5cfbe480112d0a37d04545bf7b58d8f551cca447e16dbe1d2de4bc7f80a4b022a12fbb4eaa8b
- SSDEEP 98304:PZxRd4/kK+n9pnXQTJsv6tWKFdu9ChvC74:P74cwJsv6tWKFdu9ChK7
- TLSH
  T121368DA1BB9B8176E5A682718C7B532F0025EC120B5185CBA39C361D99B17F17F3B70B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Gui.dll
- Size 5.1MB
- SHA256 4a929696d6489ff89b0a38c9bbfaeeaef30f60a9cd0b81f20125161d766190a2
- MD5 f0feb1e3a439e0db88bdd0bb1667226b
- SHA1 604b584493d16a1d6d0d8aefd10ac18af5cd9225
- SHA512 11c5306eb864ea81619d046be7d6aba6bb2be69f5cc2a9641efc683c8cbb7517806d88f627f651d2fc55487dd5b17bb30d7aca774a2678a5d77ef405eecb0e06
- SSDEEP 49152:I8hM0C7gcPoRWxLxcPCCZlk152Y76Z4/8pc01fftYKdPtdaB1zNdPTgEFcnu/Y:IFo48Pm2bp0PTgl4
- TLSH
  T143362ADDB1527173CDA292BE270F263FD1B6A966C30483C3C558AA9858703FA0F7B945
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Network.dll
- Size 1019KB
- SHA256 d617aadd1f4c04224a4903cbd6ad49249ec47f77e75376eae554fb7b1d5525cf
- MD5 fa68ea4ff2df7abc9c5b6834783df7d3
- SHA1 be817c147cbd1e7da3ed79103f2d5e6457cab3ad
- SHA512 f2f69caacfd6761976f13d07c1b2f164f2f4431c451b6bbb39f9c0edf76ccd54d540ca15406cbdf652d6552e8c0f1bc5a108e9e4d335c599d9562ce8c6beb45d
- SSDEEP 24576:DtdENvE0UskG6mT3nFs8bhcr+TPf3ucccckigiX9:oNvE0UcNvH3ggiN
- TLSH
  T18A254AA1F35340B2E59882F54D4DBB3BC53DB1258B0536D3A31C9FD6D2A26E21E3E186
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Svg.dll
- Size 258KB
- SHA256 a82e2801d252de8f32e0e2ad4f5d9656f484eeb1c693977ac8e09987a669f110
- MD5 01bcb6a12297fbbc503d96832cb289ba
- SHA1 025f2efb58b4ca43b38b7cae5f1e221836e7e270
- SHA512 6e002951c619926c7eedc5d3f71215c7047b231d30a3802cd61b5dbdc64c52cae63fcf7e659737bf0c669e58bab8e4908b2ccb18dcf88283e0917247e5dc4d6f
- SSDEEP 6144:Bw+++i/SNFzslkaT09F9kY7lvc5HxrqYJOxQUy8DvG14eIDIiO8PGJ0b3urQ3MHH:tq/SNFzdaT09F9k+vsxrzQa
- TLSH
  T1CC443962B2420E67D44AD378184F3A17A93FA046037C87EB97D9BC3958673F15EBA341
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Widgets.dll
- Size 4.3MB
- SHA256 312e2cc0fe7d1bf73ddde246f1105a83f12dc7923a9b02bd4e2614888752e6cf
- MD5 d79a36292b269607871afc815d61592e
- SHA1 8c3cbd375250da73d5e60879b8344a531ca95aa9
- SHA512 6af78640b8887a2dafb2adfdb47c57b4d4d979cdb1bfc1de603d5e50a6375cb719ac040cd4816e0cbe03c3fea33e80448d403280f3e6610fe420ff88a3c436be
- SSDEEP 49152:IuMQMs4X3mJ/yBBjWQ7PpweuH0+7KuG/8iP3z4oWmmFlu:IJ5BWpjiu71mm2
- TLSH
  T1DB269E52B2C143F4C895E1754C1EEB63C4B9B3054B1662DBA39CEE52A92D2E01F7B3C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/Qt5Xml.dll
- Size 144KB
- SHA256 fd640a9ce98c4aacb3c40e4715df03661de80aff19e4433a4017bd34cc3c0d1a
- MD5 7dcb70bdd84ac2fbbe011d4d5cbed00a
- SHA1 2d017e7cd660044ff8b9d176f0a2a916873ce8f1
- SHA512 d06c57e310aa283b202e331ca34ef34ea2a555a6bb7008526081ee74554a4b6461358a2214df8653e452585eba1e748cea36cc5a70bdf4f7d593b57dcb06432c
- SSDEEP 3072:kdwqnGvnz02TLSw4ejSwx5DkXNqi4ZSZL15e3w/mcsweXSpAXUAKSSSSSSSSXSL1:GwqnGvnz02TLSw4ejSw/C+ZSZ55e3w/q
- TLSH
  T1EFE318F2B26543A2F17392B51C1F6A2EEA7FF81C136506D3D31D6D6308386E12A37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/msvcp140.dll
- Size 432KB
- SHA256 21ecd8652ef68418a68dab73d01c1eb8a8b1fa7f6001f1c688ad78da8f7463d5
- MD5 54628f77144e17530a8b8882d1789c90
- SHA1 6b63d1cb13524b664330574fd7911f1f25dfad16
- SHA512 61e90e751912a84c258e0a5662226e38ddb1a9fc5060cb4b257d3ec7a47569af1a0e402e77b5c8a258554504f40c373a49718c2296cede7cda64bc26dc469730
- SSDEEP 12288:1ylIoRkgm9b+ChGaFyar/hUgiW6QR7t5s03Ooc8yHkC2esKIP+Zq:UlIo2dhGsrs03Ooc8yHkC2eVIPN
- TLSH
  T150944822BB420EB2E19E13B531CA432247F9FC254761A3C3A3DFF1596F556C26633A91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/msvcp_win.dll
- Size 493KB
- SHA256 9276e394bc5fa9a08b5fc84305d32544ff9f0421d0870c6d76c63a82f1955559
- MD5 7762c51ea02eb943183d597ea0ee5530
- SHA1 0b8c307eba01d0679a2669210862d0afa888c40f
- SHA512 14c955e8acb03e86cd11cb992a69fa6681769b2bb7ebdd3a587b36a519f4084be3dd42825b3c91c0d4e325a2869e96acfc88c3ca05bc59352bf0657e7c4ec758
- SSDEEP 12288:beMcMmVRYcFERWKn9g82vWirmibAhUgiW6QR7t5s03Ooc8dHkC2esJ2Sub:beMKYXQKn9g82vtnbf03Ooc8dHkC2ecC
- TLSH
  T142B44C332A4509F1E48A23B4618D936283FDEC650361A3C357EEF9AD6F6D2C06A771C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/ucrtbase.dll
- Size 1.1MB
- SHA256 0f4ec73cf4f64d4b89f3c87a127bc7c46c052a4226f9876a3a75015b716d9228
- MD5 c4a25dce665733663284750666684703
- SHA1 368f3c3497c1b0121409216282803bcf1b64f35f
- SHA512 768af35c80d0423e72fdc8178b57d4be583569c1e96cac8c00808d07aed988bc614618f7b2077617498079b6ec0faa2d2d48cc314cc34faf11f56b6b7146201f
- SSDEEP 24576:FQeBoON4h/4z/G1YknUkY3Ub6lymKmcvIZPoy4yuhpBR7j:qeBoONs42nUv3UbfjpBlj
- TLSH
  T1D2358C107895C2A4CCAD30F51A8EFA36466DB5904F24A8C377D41BFFCC690D0A9F769A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral18
- Target
  ENVIO DOCUMENTOS DE CITACION PERSONAL JURIDICA/vcruntime140.dll
- Size 78KB
- SHA256 9d02e952396bdff3abfe5654e07b7a713c84268a225e11ed9a3bf338ed1e424c
- MD5 1b171f9a428c44acf85f89989007c328
- SHA1 6f25a874d6cbf8158cb7c491dcedaa81ceaebbae
- SHA512 99a06770eea07f36abc4ae0cecb2ae13c3acb362b38b731c3baed045bf76ea6b61efe4089cd2efac27701e9443388322365bdb039cd388987b24d4a43c973bd1
- SSDEEP 1536:l9j/j2886xv555et/MCsjw0BuRK3jteopUecbAdz86B+JfBL+eNv:l9j/j28V55At/zqw+IqLUecbAdz8lJrv
- TLSH
  T12773AE22F0D180BFC566857452BAEA036B3D9A510FE18EDB6F986D841F79BC1E730217
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

loaderhijackloader

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

© 2018-2026

Terms | Privacy