General
- Target DemsInjectorV3.4.exe
- Size 71.2MB
- Sample260623-sfx8eadx4m
- SHA256 547f43dd4338d9cc7618de99f13ceba94657cb7878e19058f90a99a298a2dd51
- MD5 be9294e45347ee6c2d598f537a4bcca7
- SHA1 a56749a964e988b6b8a4f2bbbb4027760c36f2e0
- SHA512 78bc577e90690a2ba8ea316f266faf22ae75bae615dc30312a06f5cfd497688b68cc10ef12eec4509c47b5c1f11e7c819af1ec5866f70c0c98ddf3d7004ce2e5
- SSDEEP 1572864:sTIAikXJVrvoAJ4pUguPNoXWRHMr8rcrz0oZY2YDq5XGlqTVNFr3:spv54igONJH/rcXU2YeWlqd
- TLSH T14EF733D0AA902562F987C23D5AD2863A72F6F4316B3147DF03D942E62EA71C90C3D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
DemsInjectorV3.4.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
DemsInjectorV3.4.exe
Resource
win11ltsc2024-20260617-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target DemsInjectorV3.4.exe
- Size 71.2MB
- SHA256 547f43dd4338d9cc7618de99f13ceba94657cb7878e19058f90a99a298a2dd51
- MD5 be9294e45347ee6c2d598f537a4bcca7
- SHA1 a56749a964e988b6b8a4f2bbbb4027760c36f2e0
- SHA512 78bc577e90690a2ba8ea316f266faf22ae75bae615dc30312a06f5cfd497688b68cc10ef12eec4509c47b5c1f11e7c819af1ec5866f70c0c98ddf3d7004ce2e5
- SSDEEP 1572864:sTIAikXJVrvoAJ4pUguPNoXWRHMr8rcrz0oZY2YDq5XGlqTVNFr3:spv54igONJH/rcXU2YeWlqd
- TLSH T14EF733D0AA902562F987C23D5AD2863A72F6F4316B3147DF03D942E62EA71C90C3D779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.