d59bc73103668278d2831c989d841bc931edda65b0ea30c710fb33be0145fd89 | Triage

Analysis

max time kernel
15s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
14/03/2025, 23:23

Sharing

Report Analysis Logs

General

Target

Extreme Injector.exe
Size

120.5MB
MD5

9465dfab9cfd6274566a8c9827d7b9b8
SHA1

9e09efedff13c628c4c4e3a1f1312db131950545
SHA256

b35d90ba8353265bcb6eb46afd27bca25cbffc4cc3cba19e659fb72ac2d20446
SHA512

c476903eea21d12a91aa6d741bd21490e99e29d4cd47e508fdff940725ff0309005a8ed3e18d3b54a9ae6f179fdc7d435a8b061172c17638bf80082c0f936516
SSDEEP

12288:zAJ0SiRi56OdcPe1Ja4AUL/t+ijFju2qsuVo:80S492/hB+ijFHduu

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1956 wrote to memory of 2448	1956	Extreme Injector.exe	30
PID 1956 wrote to memory of 2448	1956	Extreme Injector.exe	30
PID 1956 wrote to memory of 2448	1956	Extreme Injector.exe	30

C:\Users\Admin\AppData\Local\Temp\Extreme Injector.exe
"C:\Users\Admin\AppData\Local\Temp\Extreme Injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1956
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1956 -s 36
  2⤵
  PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads