General
- Target DemsInjector V3.exe
- Size 71.0MB
- Sample260620-eav9zaet2s
- SHA256 f74d5fa69f68b4447e41887d7da960a0ad3066b59645194a002da7030e61ac14
- MD5 758b9b4f24bd8f8cc20cb60b181fedd0
- SHA1 b21cc247a511fbec5be65bf73de9c887b0f4417f
- SHA512 3abe3ea8c3ec1dc3b7e649e4bff69804d223f43a548fbf80d0552eb3b017345bb56cab955b5ad70e17d85c1c5fb21b04f6b4dca476a0d27b35fa2d8faacf37ef
- SSDEEP 1572864:X+TIAikXJVrvoAJ4pUguPNoXWRHAr8rcrz0oZY2YDq5XGlqdVNFr3:X+pv54igONJHzrcXU2YeWlqj
- TLSH T1ADF73391AAA02162F997C23D5AD2863A72F6F4316B3243CF13D942E53EA71C50C3D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
DemsInjector V3.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
DemsInjector V3.exe
Resource
win11ltsc2024-20260618-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target DemsInjector V3.exe
- Size 71.0MB
- SHA256 f74d5fa69f68b4447e41887d7da960a0ad3066b59645194a002da7030e61ac14
- MD5 758b9b4f24bd8f8cc20cb60b181fedd0
- SHA1 b21cc247a511fbec5be65bf73de9c887b0f4417f
- SHA512 3abe3ea8c3ec1dc3b7e649e4bff69804d223f43a548fbf80d0552eb3b017345bb56cab955b5ad70e17d85c1c5fb21b04f6b4dca476a0d27b35fa2d8faacf37ef
- SSDEEP 1572864:X+TIAikXJVrvoAJ4pUguPNoXWRHAr8rcrz0oZY2YDq5XGlqdVNFr3:X+pv54igONJHzrcXU2YeWlqj
- TLSH T1ADF73391AAA02162F997C23D5AD2863A72F6F4316B3243CF13D942E53EA71C50C3D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.