Analysis
- max time kernel
148s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 12:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NewInjector.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
NewInjector.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
General
- Target NewInjector.exe
- Size 3.4MB
- Sample260623-n627tscv2m
- SHA256 087dbc7d209efaa3ddf76e27765432245a216c033e4e36ed9a88dfa65e00bca9
- MD5 3016714d778e2ee93d9eaa2df1e214ad
- SHA1 309e48d745f1cd7eb70543843b291ac94dd95388
- SHA512 48d16d799ed1e6d4adcfde7678eb813ed53ebb2f8d1000f8e8cc4ea7c76780587abcf4ea709f2a07c3275d83b9af2e60305f1c931d34101daa3ad6f1ef6dd362
- SSDEEP 98304:B3UJgxgzhHWEG+PCeuMr85tgmOsVnxgcViqoQ:hcNztWEnruMrAtLOsVxDhoQ
- TLSH T16DF523F929932DF9D053C7F4439A716CB8EE7B434B604C1AFBAE61434D63219AD36A40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 4480 NewInjector.exe 4480 NewInjector.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4480 NewInjector.exe 4480 NewInjector.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4480 wrote to memory of 5936 4480 NewInjector.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\NewInjector.exe"C:\Users\Admin\AppData\Local\Temp\NewInjector.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4480 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c pause2⤵PID:5936
-