Analysis
- max time kernel
152s - max time network
157s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 17:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tex-injector-x64.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
tex-injector-x64.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target tex-injector-x64.exe
- Size 143.7MB
- Sample260731-v739vadj2x
- SHA256 1c6a5bcef16efa7521b68212a214898bf1e9f39d7d59cdde619b3fe1782bc068
- MD5 b1fab7ebfda952f56683d311d871c849
- SHA1 fa2cc7db50deb25bdd6cd7f29100d5a29ab0aa19
- SHA512 1801e568d0cb716f77b678810b724253f988df4ff9fb8f03b80b3931f858c748a1d553dfb1116374a959fa452e6adcdd791cdfea1c8a98d193101e42f7c0023f
- SSDEEP 786432:gy547/5SoT3GTmgOYsa8jNOAIQ19F+4qjmMyV1FUb:6jJY8i5jmz5Y
- TLSH T12678AF62A7D80715FA7FC278C672D219DAB0B9528321D1CF0458DA4D2FB3BD05A772B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 4236 tex-injector-x64.exe 4236 tex-injector-x64.exe 4236 tex-injector-x64.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4236 tex-injector-x64.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\tex-injector-x64\dzoJDiKk42Tm\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\tex-injector-x64\dzoJDiKk42Tm\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 eccdef38067337b485f8d5982363810bd186a86068b273116954abb2000ffabc
- MD5 c792aaac793e65ba122258df40147498
- SHA1 58972442979b0931dc491035429ea72c0dce263e
- SHA512 279531a36820d62c4c64a0934a335dc04089cd374ce8f65a468e5c47c1a80cdcc7d9d8cf09c2bed8f79735f1ce278c68fb3562f3dd4c764cdd2f3b5801c106ca
- SSDEEP 24576:lgaltAn1r1sE33slrVCP0QSeDOM8zT3n6kcNbNUdah6ox3GmOBlIefATbpwwPBFV:YnR+g8lYP00OM8zT3GbNUdvoxWZBlIu4
- TLSH T17F453A22E2E642E5C47FC1B8C6469717FBB1740A131C66DB87608B652F27FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\tex-injector-x64\dzoJDiKk42Tm\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 43516ba8b1e93677d346174b6b6543fb6878c377602e7d4e5069a6defaff18fc
- MD5 fa4f6c6eb16328fefc4b02b8bfdc48cf
- SHA1 df62e00baebe25382c167ace8bb4116976cc760b
- SHA512 df7b12ae5f1abe7da07735030bead71eccf6e5770e0f0da42fe8471de4a9b28dff3a4af8155adcff5902bee223da008d7c28525c95411846f1d8c8152627000f
- SSDEEP 24576:N7vme1ahPZ9dNv2A8KBl/NUrb0AbDRV8mSu+vPzTy7nfPq44KwjlViItoW:9a/HNv2ul/KBPRrP+jTy7fPqLVisoW
- TLSH T1FE955B4AB6BC40EAD47AD23CDAD7961BF2717410276197CF23A0479D6F27BD00A7A360
- MD5 SHA1 SHA512 SSDEEP TLSH