{
  "name": "New Hijack Loader Variant: Uses Process Hollowing, Has Enhanced Anti-Evasion Capabilities",
  "slug": "new-hijack-loader-variant-uses-process-hollowing-has-enhanced-anti-evasion-capabilities",
  "description": "",
  "published": "2024-05-23T11:50:14+00:00",
  "created_at": "2024-05-23T11:50:14+00:00",
  "modified_at": "2024-05-23T11:54:27+00:00",
  "created_at_opencti": "2024-05-23T11:50:14+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-05-23",
    "api hooking",
    "april",
    "has enhanced",
    "hijack loader",
    "hijackloader",
    "loader",
    "loader variant",
    "png image",
    "rhadamanthys",
    "suricata",
    "tracker",
    "user account",
    "yara"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "193.233.132.139"
      },
      {
        "id": "",
        "name": "185.215.113.67"
      },
      {
        "id": "",
        "name": "185.172.128.76"
      },
      {
        "id": "",
        "name": "mail.zoomfilms-cz.com"
      },
      {
        "id": "",
        "name": "wxt82.xyz"
      },
      {
        "id": "",
        "name": "a38da72082fc2dc1f60b3b245e1f2382d5f8c1d08ebc397dd0d81cc9f74ebbe6"
      },
      {
        "id": "",
        "name": "86bccbacd8e9fde23ff236155ee47f866dd7dd51c6129ed340034810a10705b3"
      },
      {
        "id": "",
        "name": "0ae58be8d7058e40926fdb51b76043d109b96b91aa9fa2950dbb8a3626185e0f"
      },
      {
        "id": "",
        "name": "discussiowardder.website"
      }
    ],
    "malware": [
      {
        "id": "07745774-0e49-4c61-94cb-9a6a030762c5",
        "name": "Hijack Loader",
        "slug": "hijack-loader"
      }
    ],
    "attack_patterns": [
      {
        "id": "8ed2b0cb-034c-4425-920d-ee06e5cf98ed",
        "name": "T1104"
      }
    ]
  },
  "external_refs": [
    "https://any.run/cybersecurity-blog/new-hijackloader-version/?utm_source=csnandgbhackers&utm_medium=article_post&utm_campaign=birthday2024_scn&utm_content=plans&utm_term=200524/",
    "https://otx.alienvault.com/pulse/664f4996470e45e98fc5d53a"
  ]
}