Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/06/2026, 11:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HerculeInjector.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
HerculeInjector.exe
Resource
win11ltsc2024-20260618-en
4 signatures
150 seconds
General
- Target HerculeInjector.exe
- Size 13.0MB
- Sample260620-nc7v8aev9m
- SHA256 277ed1e388f6d808fa9a44f01e97798ddcc0aea9f40b3a603058920684decd9f
- MD5 f9b5499a9a8ee73ce70c90fbef5ed1c2
- SHA1 6f548795e49d5d78f2fa2f8744aeb42b36affb10
- SHA512 58326273d8127bb05ac2c3212661a649dccd1a88a604e1d47f2e601701c8592b33aef4dbd5986a69f66cfc7b6328f9dcfb246b7b99a1e7142a3c85c2545c3188
- SSDEEP 196608:742tYvIZ6SQ10UAc/ikEZSnf2BBWk5SDJS7UsN+Z4C:r6IZ6S8Ac//8BW8Usm
- TLSH T10FD6F1F14A8EF0CCD4466EF3F846D2A83251298A13DD8A44D7E12DDB662E856F0D784F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4084 HerculeInjector.exe 4084 HerculeInjector.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4084 HerculeInjector.exe 4084 HerculeInjector.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4084 HerculeInjector.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4084 HerculeInjector.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\HerculeInjector.exe"C:\Users\Admin\AppData\Local\Temp\HerculeInjector.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4084