d690d23996aacbb53f3c9cc411b00fd8ad071ce57d0184607c09c0a0cd40d6b6

Analysis

max time kernel
18s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
05-08-2024 22:55

Target

axion/injector.exe
Size

26KB
MD5

0edcce814cd28cd611b23bf1778724bd
SHA1

2ace743b2978ff8102ace3624bf70d5bbe8a38ba
SHA256

0289292334053251e619dabf53d325fb8981587d039e85d230c37f5d7cc93f30
SHA512

01b2e77b3ac77079c5a19ef6a53954eed9e8dd2dcf79ed3791ab37643f47f9491eb3203a4eedeaa64a2df14ec8f7149d3b695603686f4c24cdf27ede6e188ee9
SSDEEP

384:385CH0qDw+ocjPZmJweR00bgI27tfK9n0JKSbD+vamB1ENY89kYU78/2ZfQsvw/v:30w0arF09nmK+Y/YU7pfQs4/p

Score

1^/10

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2704	2268	injector.exe	31
PID 2268 wrote to memory of 2704	2268	injector.exe	31
PID 2268 wrote to memory of 2704	2268	injector.exe	31
PID 2268 wrote to memory of 2136	2268	injector.exe	32
PID 2268 wrote to memory of 2136	2268	injector.exe	32
PID 2268 wrote to memory of 2136	2268	injector.exe	32
PID 2268 wrote to memory of 2756	2268	injector.exe	33
PID 2268 wrote to memory of 2756	2268	injector.exe	33
PID 2268 wrote to memory of 2756	2268	injector.exe	33

C:\Users\Admin\AppData\Local\Temp\axion\injector.exe
"C:\Users\Admin\AppData\Local\Temp\axion\injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2704
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c color D
  2⤵
  PID:2136
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2756