General
- Target HerculeInjector.exe
- Size 13.1MB
- Sample260731-3p67satama
- SHA256 a77b066d44ce969cb8286e0ea69662c17f5280a02802b1208152b6b6ca8594a7
- MD5 b11592bc3c0fcee39ba14e6a5418997c
- SHA1 19e7070745e483609b1440b872082728b8ba638b
- SHA512 135f28322d0f0a8cc47f883b63d019d8b5a9f2f42a5063922bef5a9342d3b30d59b2d8bb7051a79f18893a21cf9e7f92b0342bcd20a1c6739a9bb88213a11524
- SSDEEP 196608:pUhVrYSSn604Dqt910/utZSpThjzqeVPuiepFrPloW9gJ3e6WzVgfsMgf7V:yhN44DK0WtZSp9OOPujqW6Wpso
- TLSH T1C7D6E0F14A8EF0CCD4462EF3F44AE2683261698E53DC8A44DBE12DD7662E456F0D684F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HerculeInjector.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
HerculeInjector.exe
Resource
win11ltsc2024-20260709-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target HerculeInjector.exe
- Size 13.1MB
- SHA256 a77b066d44ce969cb8286e0ea69662c17f5280a02802b1208152b6b6ca8594a7
- MD5 b11592bc3c0fcee39ba14e6a5418997c
- SHA1 19e7070745e483609b1440b872082728b8ba638b
- SHA512 135f28322d0f0a8cc47f883b63d019d8b5a9f2f42a5063922bef5a9342d3b30d59b2d8bb7051a79f18893a21cf9e7f92b0342bcd20a1c6739a9bb88213a11524
- SSDEEP 196608:pUhVrYSSn604Dqt910/utZSpThjzqeVPuiepFrPloW9gJ3e6WzVgfsMgf7V:yhN44DK0WtZSp9OOPujqW6Wpso
- TLSH T1C7D6E0F14A8EF0CCD4462EF3F44AE2683261698E53DC8A44DBE12DD7662E456F0D684F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext