Extracted

• • Target
    https://getoutofthebackseat.com/HashManager64.zip

  Score

  10^/10

  defense_evasiondiscoveryhijackloaderloaderprivilege_escalation

  • Detects HijackLoader (aka IDAT Loader)

  • Family: HijackLoader, IDAT loader, Ghostulse,

    HijackLoader is a multi-stage loader, first seen in 2023.

    loaderhijackloader

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1