Analysis
- user interaction
yes - max time kernel
11s - max time network
11s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 14:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VLONEINJECTOR.exe
Resource
win10ltsc2021-20260130-en
windows10-ltsc_2021-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
VLONEINJECTOR.exe
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
General
- Target VLONEINJECTOR.exe
- Size 22KB
- Sample260415-rrfbasg14p
- SHA256 7f38c4d3a9988356a88b1e217367b9db523b1a8ad4c127d7384a1801a335da50
- MD5 495bd2b4f850abcab73357f2d827ff31
- SHA1 abc80fc9b3746c525f453a214f0af457bcb8b3a1
- SHA512 879d038fceb9233dddb560385cfef14e7ce8bccb3b54c903a3ec4456995dbaf69dcaa2a459266c2123304f368427762a2e3a45b1660f5cea0e54091ed1810362
- SSDEEP 384:PHiR/++8RSp0Dkp59eiYb5bxJNSpjzP2SSK03A9azkZCAH53g:vc++8sR6b5bvEp2Sb0w9xH53g
- TLSH T122A21A76E3DD24EED022A2BCBED64D55D270B80D4311BBCB475099260FA6FA0DB3E581
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 1 4368 VLONEINJECTOR.exe - Suspicious behavior: EnumeratesProcesses 22 IoCs
pid Process 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe 4368 VLONEINJECTOR.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4368 VLONEINJECTOR.exe