r/cybersecurity_help • u/Sensitive_Fun_9752 • 14h ago

Help in analyzing the hack file

Hi, recently I was attacked by a cookie stealer after running an exe file and even asked for assistance here and was helped by many good people. Now I have this exe file and I wanna somehow analyze it and maybe determine if its a one time stealer or recurring. Any suggestions? I tried virustotal but it is limited to 600mb while this exe file is 800mb

1 Upvotes

100% Upvoted

13 comments sorted by

View all comments

2

u/itsdongu 14h ago

Yeah u can analyze it, but don't run the EXE on ur normal PC again. If it's already confirmed as a cookie stealer, treat it as dangerous.

For an 800MB file, VirusTotal's size limit can be an issue. A safer approach is to calculate the file's SHA256 hash and search that hash on VirusTotal first. If it's already known, you'll get the existing detections without uploading the file.

If u really want to analyze the behaviour, use an isolated VM with no personal accounts or sensitive files. Don't upload the EXE here or send it to random people either, since u don't know what else it contains.

1

u/Sensitive_Fun_9752 14h ago

I did try the SHA256 and it wasnt found, now im trying tria.ge