d690d23996aacbb53f3c9cc411b00fd8ad071ce57d0184607c09c0a0cd40d6b6

Analysis

max time kernel
94s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05-08-2024 22:55

Target

axion/injector.exe
Size

26KB
MD5

0edcce814cd28cd611b23bf1778724bd
SHA1

2ace743b2978ff8102ace3624bf70d5bbe8a38ba
SHA256

0289292334053251e619dabf53d325fb8981587d039e85d230c37f5d7cc93f30
SHA512

01b2e77b3ac77079c5a19ef6a53954eed9e8dd2dcf79ed3791ab37643f47f9491eb3203a4eedeaa64a2df14ec8f7149d3b695603686f4c24cdf27ede6e188ee9
SSDEEP

384:385CH0qDw+ocjPZmJweR00bgI27tfK9n0JKSbD+vamB1ENY89kYU78/2ZfQsvw/v:30w0arF09nmK+Y/YU7pfQs4/p

Score

1^/10

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 4856	4884	injector.exe	84
PID 4884 wrote to memory of 4856	4884	injector.exe	84
PID 4884 wrote to memory of 2484	4884	injector.exe	85
PID 4884 wrote to memory of 2484	4884	injector.exe	85

C:\Users\Admin\AppData\Local\Temp\axion\injector.exe
"C:\Users\Admin\AppData\Local\Temp\axion\injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4856
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c color D
  2⤵
  PID:2484