Overview
overview
7Static
static
3injector a...recipe
windows10-2004-x64
3injector a...recipe
windows11-ltsc_2024-x64
3injector a...r.iobj
windows10-2004-x64
3injector a...r.iobj
windows11-ltsc_2024-x64
3injector a...r.ipdb
windows10-2004-x64
3injector a...r.ipdb
windows11-ltsc_2024-x64
3injector a...1.tlog
windows10-2004-x64
3injector a...1.tlog
windows11-ltsc_2024-x64
3injector a...1.tlog
windows10-2004-x64
3injector a...1.tlog
windows11-ltsc_2024-x64
3injector a...1.tlog
windows10-2004-x64
3injector a...1.tlog
windows11-ltsc_2024-x64
3injector a...dstate
windows10-2004-x64
3injector a...dstate
windows11-ltsc_2024-x64
3injector a...in.obj
windows10-2004-x64
7injector a...in.obj
windows11-ltsc_2024-x64
3injector a...43.pdb
windows10-2004-x64
3injector a...43.pdb
windows11-ltsc_2024-x64
3injector a...ui.ini
windows10-2004-x64
1injector a...ui.ini
windows11-ltsc_2024-x64
1injector a...or.exe
windows10-2004-x64
3injector a...or.exe
windows11-ltsc_2024-x64
3injector a...or.pdb
windows10-2004-x64
3injector a...or.pdb
windows11-ltsc_2024-x64
3injector a...to.dll
windows10-2004-x64
1injector a...to.dll
windows11-ltsc_2024-x64
1injector a...10.crt
windows10-2004-x64
1injector a...10.crt
windows11-ltsc_2024-x64
1injector a...mo.exe
windows10-2004-x64
1injector a...mo.exe
windows11-ltsc_2024-x64
1injector a...mp.dll
windows10-2004-x64
1injector a...mp.dll
windows11-ltsc_2024-x64
1General
- Target injector all.rar
- Size 1.7MB
- Sample260803-ga6f2scf75
- SHA256 f6a80032988dae1794cf215fad93ff3667c7d8188ccdcb94aa27a33b9df42613
- MD5 fc5e2570e8fb136d2a538cf19e398477
- SHA1 5daee753c013db5a879d9489c74d0545e9c47e9f
- SHA512 668c019265655840f8210c52f1a588a5181a7f852f87b4bd34cba86b30d8d353876132f077848c33e85c7e6f64791b94e97ca8670eebcfc8a3e2e97848edd850
- SSDEEP 49152:iKc3dkEYyg71kWlcnWPNoRFwu6CNsttrh4pccw:5c3diKW6FjNs5kPw
- TLSH T1668533C9DA18D5936B92796405E19A2FDCB9E2C930C2DFF8BF1170362A73728D087D52
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.exe.recipe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.exe.recipe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.iobj
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.iobj
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.ipdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.ipdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.command.1.tlog
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.command.1.tlog
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.read.1.tlog
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.read.1.tlog
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.write.1.tlog
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.write.1.tlog
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/Usermode Injector.lastbuildstate
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/Usermode Injector.lastbuildstate
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/main.obj
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/main.obj
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/vc143.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/vc143.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
injector all/Usermode Injector/imgui.ini
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
injector all/Usermode Injector/imgui.ini
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
injector all/Usermode Injector/x64/Release/Usermode Injector.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
injector all/Usermode Injector/x64/Release/Usermode Injector.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
injector all/Usermode Injector/x64/Release/Usermode Injector.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
injector all/Usermode Injector/x64/Release/Usermode Injector.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
injector all/signtool patched/BouncyCastle.Crypto.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
injector all/signtool patched/BouncyCastle.Crypto.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
injector all/signtool patched/CSC3-2010.crt
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
injector all/signtool patched/CSC3-2010.crt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
injector all/signtool patched/Demo.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
injector all/signtool patched/Demo.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
injector all/signtool patched/LibTimeStamp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
injector all/signtool patched/LibTimeStamp.dll
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.exe.recipe
- Size 316B
- SHA256 aebde41c60cf3e5e9e20c5c5b2de8056136d8a68f6488b48a5738d95e24e4b01
- MD5 9e6f22bb8d90e0f41f984aee14da0b6b
- SHA1 88e5e5a2db4cf2c176a3881b25b02962e44cae9e
- SHA512 d3341c51bb6e7aba037c3119d078bca066d5cd82960dde2f441d8e764f064b8ae34b38e4d9c906edfa2bb516985f4a151f72120621e3de51cd7cf5a548003364
- TLSH T17BE08CAA4AC0E442A7B08116D36EDE6EFB8AADC305680CB13580CD7F1E8311401039AB
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.iobj
- Size 443KB
- SHA256 2271311b127b06fc2a1b9d6289f6444aabfbd3fd83f5b5461cb057ddd1949f03
- MD5 af180ef3e53dad16ee5aa65c59023564
- SHA1 a56b6064f872a7bc01d488ec7cc4534416b8da73
- SHA512 f8a07d12480710bdee186ed1f92eccd7204a10d930e9247af52903189f4d23fb625c5a9a8220044d699c35773b05f0245d86b9a6a097a14f25fdb313f84ad759
- SSDEEP 6144:sPvJgu+lqoGoojDFFU3flp3m1Z++OV73QHYhnoiJ8AEIkrU+9i5ujiN1:cNvDMjRV7gHYFT8APkTxmf
- TLSH T10BA42A12FBA88A62E92953B4E1C3062E73B5FD0A1F87674B638FE0715DC73847997850
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode Injector.ipdb
- Size 173KB
- SHA256 143b8690463da0067af1dd807b768562846d60fb8844136d9f7bb57b43b78a09
- MD5 cd69e4e4f19d2622db985676a46a7bb7
- SHA1 98b372061c9aeee87e6a0fe0bc6401814d1d2077
- SHA512 9899401c1fa345706acd377f0e5e90e87280538b62560377c92c82286f865d8365ae6f5d0197459a9b30626a8c2939890fe9cc3f10eae69841f28eb275bf0867
- SSDEEP 768:1vu7VUNILKaKnz9UEzXkl4lbCs7ETEZ2WdhbEhlAo8qo0IoQE1Pd:1vuzLwzXXk6Nx7/Z22bMlAo8Z0qod
- TLSH T194044F5673818A32C419033248D79FE27B75FE020B2B4B4B72FB5A3D2DA27957E915C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.command.1.tlog
- Size 878B
- SHA256 f80970069f5c7cc57aedae332fa8d805c9f6d86351eb065419e556c2730e066c
- MD5 8ff35edf725ebbe3966c3d731b032112
- SHA1 3d11786e263d2f52e1f14f8b61e9a0f97cbffb17
- SHA512 375cc34eeee5a4ecfc6f76d192c68a1f67d342ce6700ba551c9a720281a47beeab120e49b618a93f42480aa1f55dcf88d601f89bec6bf29020fc0926397a2bc3
- TLSH T1AD11F53431FC914BA3613ADE4FEAD0DB8A79B7A3CA734A3F507002175264D04AD50B32
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.read.1.tlog
- Size 45KB
- SHA256 18afe1894adf1e66d3aa8693fa919df9204a0bc39ac12f6f7779127a0acf1563
- MD5 7ebf60551baa1d149e357418c7e9670c
- SHA1 e7093e41a14a0109d05366a94ccde33e512f05fc
- SHA512 449de7e65ac00ab29aec67484d3869ccac6ab4235059d582aefc9e264a30897e60627c2bb044179363cce6b4c38a5fc9bf3858eb8fb93233f855ae1c911ec3b9
- SSDEEP 96:Up7RrmL9MXOu2Ys54d2ulkymJdmJZmJUosesgjMt8ssHx1OwNZ7r7XPrtrPr/Mr3:I6bdPrDRD/ovgKXFarwSYyaK76p
- TLSH T17023361C70EA22496312F2C6DBCBA95BC327F2B8D63B576F5194130313916176E82FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/CL.write.1.tlog
- Size 426B
- SHA256 024ddfad7ea30f4923ceb29636d7e93e79cc472019dd499fd475f53b5f4b6187
- MD5 b2e598ad4188d0232083aa8a09651ed4
- SHA1 be8a33c41b329c34341d481ea9c27613206558ed
- SHA512 3ed71923744f2df43a763438dbae37c539cd432be9b68e7faeedcab4488238b64368abcbc61f5a6ca81020c207b8e7fb4f5c083d8d3575064646db3755c4a7cb
- TLSH T1F6E0B63A70ECD2DB131134EA0FCDE0E9D716A7A3DEA35B3B6484D263B2A4C040584772
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/Usermode.d0549b7e.tlog/Usermode Injector.lastbuildstate
- Size 196B
- SHA256 b81682baad58dad31eb7babc8364eac27191dcc0ff655d1fbe5ab38475304c8d
- MD5 57e30c8e02c72a002bdc7df3c62900d8
- SHA1 72421dd9f26ca40164afe3b83500730972405055
- SHA512 55044df194b9c89b1a6ac2a3aae837334e9a666555a0928e3ae3dbaf7c9fb03cf37a27996d3b0ed6bd87877aa4cc711e19f858be0d9b4961982b9f9cb52560cf
- TLSH T1FDD0C0041340E9F7A822AACB90CE908DABF4B184043130AC5F812F0E3FC221E005337F
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/main.obj
- Size 1.4MB
- SHA256 9426d4ae6f3ef99661a301202c2ed7c40335b4292b9a8fadece2e6eba78e540a
- MD5 43aca33368ab3f40c19ba352f8bf85e1
- SHA1 3b0e0d4a9cec122442d8d4df089aff1d1579be09
- SHA512 090eca108314c11ac8f1467e23b3612e13b5b951cda1406e08bae15c7bbf7d44738c7af9cf039f373c12200f95ae0e0eb7528b8ef86f0f31ebc640ffa3b6d4b3
- SSDEEP 24576:hv2BU2xCdPkuy+dfrSvueVVTHxyW0E7dUFkzJQMt+xMUQOt3qkcMAJ33FjlFiL7J:wB/ukTHxygUFpxM5FjlFiL7V5Mo0f8nV
- TLSH T1E4650A129DB4CB43DA6A7E31C157033E7A5188AE3934EA83C17FC55F58AD2CA42E3572
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target injector all/Usermode Injector/Usermode.d0549b7e/x64/Release/vc143.pdb
- Size 548KB
- SHA256 eff5596e9d561069031b12b7303f6e730fff9714794601afd75ad7639577602e
- MD5 485aff1bb91608ec1bec66cf02dac2eb
- SHA1 fe71a3094e86a5150ce0eeb3fa86415bae68776d
- SHA512 d93f326d6d278e89c151b2ffd63b85e70a79b425ed9489f987f355201f66c1171d13b3001484c7e647127f47da3357db1b790227696dd8e1d00f2d29049078b7
- SSDEEP 12288:F+z6JIM1aqXaUPRKc+3mWo+YihEEInXrSW25lOY:F+xidXaUPRKc+3m5xihEEInXrSWMl
- TLSH T161C4FA62F5458E33D4AE533A900B17A423155F0A83CE3BCF5156F0616FFE359AE2EA81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/Usermode Injector/imgui.ini
- Size 53B
- SHA256 1e21059a351147e54cfdaca82ed646444088932581ca4b6fac73152495367f13
- MD5 d72e9b6aedadd882091194f5222fbc5d
- SHA1 ead0f6ea01a035533ab541b75ca6f637d6d0825d
- SHA512 d98c9e889d1f10c38fbb5eae1a4da303c7b1dfb9bf28f52b419e3dfd86cac661081d67bb79c66fce7dee3f1095db4d8be06b0c085c9305e83b654e7307f83ac9
- TLSH T1869002016321511C42B69040917D226925895A086446B48050901005195B51264475C5
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target injector all/Usermode Injector/x64/Release/Usermode Injector.exe
- Size 34KB
- SHA256 c065c4a5174b1fad1deca1998f7a6d39322702d30e4683be3180c2f989b3ce8a
- MD5 7f3103a03704ce8176989c341c067124
- SHA1 42a7c012bb7a55a302ae7be50db6b5c43beeb426
- SHA512 51090ce0155e77f7b9fbd9ae4de25d2f580406a03fd923fcc24ac6cb39d16fc70935b95e9903bd468dfe566308cfdcb833ebae7e7d14309721e4cb963f508b43
- SSDEEP 768:JcMYSzA+OCLxDPoaaI1kFvMteLnnPpJYTzn3BZfqf:DYSzhPrHkFvRYzRZf
- TLSH T177F23A2B276700E4C5FA92FC8597274AEAB27C111711A3CF53B1814A0F667E0B97BE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/Usermode Injector/x64/Release/Usermode Injector.pdb
- Size 1.1MB
- SHA256 4a6835d323e4665cb73b30174d9836436baf58e6a023b6ecef1e28e8fdb58d60
- MD5 05334b2103ebe6c169134d1a197b2c28
- SHA1 cdda7a301ddfd84378bd0d440206aa4d927b646b
- SHA512 f25820703733851714568c75af8906575d160131b7a1196fe49295d93c0413bdcc157078b23dd9c7d59b8d62696b3c90fc58a3354ee8f4a573a552797ccca366
- SSDEEP 12288:H2mpP2JPo7Oa0K6rNRgjbzSPtTFKy1+I3P1cnzj:H28P2pda0PNRgjKlTky1n9mj
- TLSH T198455A62E7598E32C45E073AB107171C23C9DE029B8E37DB8515F2526DFA358DF2EA81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target injector all/signtool patched/BouncyCastle.Crypto.dll
- Size 2.4MB
- SHA256 ca7ef45e848770e74a4a09a6d9c27e47852e0e13e371413594eb18199b18337d
- MD5 e1bfd146d18cd9c2a08d657e215a5fa8
- SHA1 d429aadf4a830441dc070460418ac67eaf5d9f72
- SHA512 fa4f88020bd68bb418abe871512e27423dc1ce4dc8bff336432ad906e358dc115c4ed424029a5de27c02d468040534c1b4eb1859ca67ac837d4a54c4cbb6e785
- SSDEEP 49152:FiS2lEfHUzKo1DX3fJNuMicNRJb6vd/cOWE23UfUCGK2XQqmMiUciqSC7souk1b8:1fHo1DX3fDudS+l/cOWE23UfUCGK2XQO
- TLSH T10AC55A196AE88617D6ABD3B1EAF00411B7F0F42EB353F74B25C263B51D637609C412AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target injector all/signtool patched/CSC3-2010.crt
- Size 2KB
- SHA256 694e8307d8205f965e0f08079c506f57c2a05cfb2778674ec208b9fa50ce083f
- MD5 9eea8ba0c7819f88ebe0a5f35efd8a04
- SHA1 650f62f5fd10f52c8f5fc7a900cdbb9a05e2f307
- SHA512 fedbeaa4f68679640051db6d747a71832a3030176849f1ece1e333852f44d8bc912afcbef35219df8a24d48e2ba01160e3e50d2d9220bf90c0b0c14011293f5f
- TLSH T19C4109029F382D4E21D3445691B12B09ADAC7240EC9652FA19867D83C409A3E2E8B5C5
- MD5 SHA1 SHA512 TLSH
Score1/10 -
- Target injector all/signtool patched/Demo.exe
- Size 23KB
- SHA256 e3344a661731547c17072bdae0cc63677fc1c9ae5e487b1f73fc9953009e2e51
- MD5 8cd7215866ffb7451d142120b80d7a65
- SHA1 6ff089e6ce57bd08bcd4d839b994662204c1a9a6
- SHA512 8e50312a24b8d2f7863fda60da15d0beadd961d6267c65604956dff45d0fc2c402869299c2474a610eafd5765a920492b1aed11fd72c1e8f9829e0e6741c4310
- SSDEEP 384:5smSmK4quaT9dD84EhYsQKMK6jpTOFjXDHp2PnhkO:5X2aK9dw4Ehv+KgZOFjXDHwhr
- TLSH T1E9B22AA6A7A80902ED73DF3028F462056F31F781AEF5C5DE6218C04A0FD5BD5297472B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target injector all/signtool patched/LibTimeStamp.dll
- Size 23KB
- SHA256 beef8137fab4df0e66416d88a10b76934c3e996aa0e677bfb6a8e0e05b555453
- MD5 41e899fbaa6b64add1007145254d038b
- SHA1 852303be8e337a1e966ebdbcf202de758419c0c6
- SHA512 dd098cb8060f8577439a2ab4c10209c7c2ef9eaa3e8bf60b6958766087de4f1c0eeb958ec3d45e5be13cecc6acbf5e583de6931af61fbc792912d9b894927256
- SSDEEP 384:HwwwTQlTBAYGwjjRphYsQKMK6jI6lOFjXDHpuPnhjR:FwWTiajVphv+KgIkOFjXDHshjR
- TLSH T115B239A59B581901ED739F3028E86A06AF30F781BAF1D6DF6119C0465FD4FA4397832E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10