66e0888f56648f56e9a3b48022f7514e57ae09cda14b322d7264d0b284f4a423

Analysis

max time kernel
92s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
22-02-2025 04:34

Target

Senex-valo-unlock-all/senex-valo-injector.exe
Size

290KB
MD5

d3af367eb793ee15aa368db650f94d37
SHA1

0ecdb764eb9d732c5912bb745718143011bae107
SHA256

def59fdbc8ed2cb7ba1ba40c80cd20a58a85df0eb949d2403c553b7db9d92f71
SHA512

0012c09d2cdec2dc9be87712e7bd07c69520a1656885111b00f679ec19dc75fb09015c87bcdf1777efb70471e85eaac9718dcf06502be5c96e738f0f745b724a
SSDEEP

6144:Lqq/z2Ryg7R/zQZiOBJ17JeCy3p644Jd6fv/NQsp:Ly+bJ12644Jy/e

Score

1^/10

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4964 wrote to memory of 2668	4964	senex-valo-injector.exe	89
PID 4964 wrote to memory of 2668	4964	senex-valo-injector.exe	89
PID 4964 wrote to memory of 4332	4964	senex-valo-injector.exe	90
PID 4964 wrote to memory of 4332	4964	senex-valo-injector.exe	90
PID 4964 wrote to memory of 948	4964	senex-valo-injector.exe	91
PID 4964 wrote to memory of 948	4964	senex-valo-injector.exe	91
PID 4964 wrote to memory of 4428	4964	senex-valo-injector.exe	92
PID 4964 wrote to memory of 4428	4964	senex-valo-injector.exe	92
PID 4964 wrote to memory of 2956	4964	senex-valo-injector.exe	93
PID 4964 wrote to memory of 2956	4964	senex-valo-injector.exe	93
PID 4964 wrote to memory of 2676	4964	senex-valo-injector.exe	94
PID 4964 wrote to memory of 2676	4964	senex-valo-injector.exe	94
PID 4964 wrote to memory of 2616	4964	senex-valo-injector.exe	95
PID 4964 wrote to memory of 2616	4964	senex-valo-injector.exe	95
PID 4964 wrote to memory of 1312	4964	senex-valo-injector.exe	96
PID 4964 wrote to memory of 1312	4964	senex-valo-injector.exe	96

C:\Users\Admin\AppData\Local\Temp\Senex-valo-unlock-all\senex-valo-injector.exe
"C:\Users\Admin\AppData\Local\Temp\Senex-valo-unlock-all\senex-valo-injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4964
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2668
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4332
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:948
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4428
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2956
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2676
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2616
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:1312