8072938a42757db90032185c4890b011123da399c2505a7667a596126ebe9a89

Analysis

user interaction
yes
max time kernel
298s
max time network
283s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
05/06/2026, 10:26

Target
inj.exe
Size 55KB
Sample260605-mgqbasey2p
SHA256 8072938a42757db90032185c4890b011123da399c2505a7667a596126ebe9a89
MD5 6e41e128fd91931933f0e24045e32d51
SHA1 22c0279ecec323e0833f1385541ddeba1b57e66c
SHA512 610040a1237aa867276b81e7c6e6d2a1ac0ce3af2db0d264c0722e76508f984e73056d60fed2b48ed8ac32c38500d61816ec25f9f8b30b4f9adc76244690cfde
SSDEEP 768:yXDwG2y1xWFnADrJW8X2zKGx/olP5aP3B0Gt7BHlRR5HPjYd3vEueE:yzwGPrJW86bx8PMPeGpZR5vTE
TLSH
T1E0434C53EB6804ECE07AD3BDD6A78B86EB72F406032157CF0750921A0F1B9D56D7EA11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5100	inj.exe
5100	inj.exe

C:\Users\Admin\AppData\Local\Temp\inj.exe
"C:\Users\Admin\AppData\Local\Temp\inj.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5100

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2176