Extracted

• • Target
    PASS_KEY.docx
  • Size 13KB
  • SHA256 b699cc417fecd98913b7bc1830fbcc68c4e9193b8c3b3dde768c00a36c30dbe3
  • MD5 8bf1f5a0a0c57a49c33c4338507fc17f
  • SHA1 91215df94ef9a8b3c10cabd5ca9714769ed01e87
  • SHA512 2fb0bab6b7b13c7b3913af4fb166d0120d5cf81b34907e008d49eb837f7efe8774d8854accee9f3a63b472cc899f7d62969ae69aff675d2e61083c085b917ffd
  • SSDEEP 384:QmDJn99/qosNlOURNrfqfhHMy02H5m04H:Q4p/qdtRNrfqfFMYH5A
  • TLSH
    T152529D36CA854A29D60697F8D2901F4BFB3FF426961761C17C9963C8DC890FC5A23A4F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  1^/10
  behavioral1behavioral2
• • Target
    Setup.exe
  • Size 10.3MB
  • SHA256 6cec1900696b5ce8bdba4417427073e30cc89507283bae151219cf36524a1cf2
  • MD5 c0ec1460f9c555b83b0f7f88447a6049
  • SHA1 9ffc9a4fb8753261bea6d0bed083dcbfeecbf0bf
  • SHA512 cb68a16ea3fa7092a2f9fe39ea3203dc7c95e8fc3faa1be073162728e44c5d1c3fbfed2d6ee46c835f3a79fd95c02d648528cbf00669260161e834c12bdaa9b4
  • SSDEEP 196608:+pMSI59/3xZn8PIjAX6M8QidPIpKMYo9OG15h5PGO/LcmSvmegrI1KK:+pMSI5lBZQX6M8QsIAzooE5h5PNPSu5I
  • TLSH
    T180B6339373917CF2C475CA318E4ACB6A5427E7E42384AC5ED2C60F622E935D4099F8DE
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  credential_accessdiscoveryhijackloaderloaderspywarestealer

  • Detects HijackLoader (aka IDAT Loader)

  • Family: HijackLoader, IDAT loader, Ghostulse,

    HijackLoader is a multi-stage loader, first seen in 2023.

    loaderhijackloader

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral3behavioral4