da446be37db2ec3f63ab2c53dffcb1cf005abb91df858da8197e026604e77789

Analysis

user interaction
yes
max time kernel
40s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/06/2026, 16:13

Target
NewInjector.exe
Size 55KB
Sample260604-tpjbaaax4w
SHA256 da446be37db2ec3f63ab2c53dffcb1cf005abb91df858da8197e026604e77789
MD5 e6f1c3d010a72e683dce8ff750cc6880
SHA1 d9625ad5ca092aadd0dc4302e9b40505cdbc97df
SHA512 2e5a2cb45f57c6b3588080f7d316cf89fedf9f9f9a36c6631847c147d39be83e89290be42ba2aa67317eebbe38e69ed7b76e9d13382cd41824475183c53273ed
SSDEEP 768:e2U4shP6Ox1o8ZpsqFdFbywgx+1J0p8/crb/NvbO2a4a0pOPCq3xt:e2U4sDXo8UqF7iL8cNTOqa0pObt
TLSH
T118435C6BB72900E8D0A7C3B8D9934A17E7B6B8050723A3DF53E192460F276D5693FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2112 wrote to memory of 3696	2112	NewInjector.exe	81

C:\Users\Admin\AppData\Local\Temp\NewInjector.exe
"C:\Users\Admin\AppData\Local\Temp\NewInjector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2112
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:3696