Overview

overview

6

Static

static

3

windinject.exe

windows7-x64

1

windinject.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    windinject.exe

  • Size

    1.3MB

  • Sample

    240810-f69ynsxerr

  • MD5

    084186408c3a3c3cbce4239b8d979cd9

  • SHA1

    a918568f552d4245d47482dd80494623e267b987

  • SHA256

    0ce9a490c10e426b0d442480d75d3327967a063daf0b2a409671d8c239d2db43

  • SHA512

    03e0adcfd58e1482885cec3e7256570778f725a0e72d2553634cbb514e9591fabeebfa700ea610d84e295fa57506696a26273f46cd44f085d38b1c114ce12ca1

  • SSDEEP

    24576:cY3tjSqaCv8laDZ1fOnYKqZlypz2a0jZAqM/9wnaDIjCcccemf4yP4LLVjOxIR:1dlawnaDIjImf4Fq

Score
6/10
discovery

Malware Config

Targets

    • Target

      windinject.exe

    • Size

      1.3MB

    • MD5

      084186408c3a3c3cbce4239b8d979cd9

    • SHA1

      a918568f552d4245d47482dd80494623e267b987

    • SHA256

      0ce9a490c10e426b0d442480d75d3327967a063daf0b2a409671d8c239d2db43

    • SHA512

      03e0adcfd58e1482885cec3e7256570778f725a0e72d2553634cbb514e9591fabeebfa700ea610d84e295fa57506696a26273f46cd44f085d38b1c114ce12ca1

    • SSDEEP

      24576:cY3tjSqaCv8laDZ1fOnYKqZlypz2a0jZAqM/9wnaDIjCcccemf4yP4LLVjOxIR:1dlawnaDIjImf4Fq

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks