# Hunting DeerStealer: DLL Sideloading Through Signed Binaries

**URL:** <https://community.limacharlie.com/t/hunting-deerstealer-dll-sideloading-through-signed-binaries/648>\
**Category:** Community Intel\
**Created:** [March 25, 2026, 12:09am UTC](https://community.limacharlie.com/t/hunting-deerstealer-dll-sideloading-through-signed-binaries/648 "2026-03-25T00:09:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Steve\_LC](https://yyz1.discourse-cdn.com/flex033/user_avatar/community.limacharlie.com/steve_lc/32/155_2.png) [@Steve\_LC](https://community.limacharlie.com/u/Steve_LC)\
**Post date:** [March 25, 2026, 12:09am UTC](https://community.limacharlie.com/t/hunting-deerstealer-dll-sideloading-through-signed-binaries/648/1 "2026-03-25T00:09:55Z")

</div>

> **[Hunting DeerStealer: DLL Sideloading Through Signed Binaries | Josh Strickland](https://novasky.io/hunts/hunting-deerstealer-dll-sideloading)**
>
> Hunting for DeerStealer and HijackLoader delivered through DLL sideloading with legitimate signed binaries. What the kill chain looks like in EDR telemetry and how to find it.