Analysis
- max time kernel
119s - max time network
96s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/08/2026, 16:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AerialInjector.exe
Resource
win11-20260513-en
2 signatures
120 seconds
General
- Target AerialInjector.exe
- Size 493KB
- Sample260809-ts814shr31
- SHA256 4b83aa524d01ebd8b2d2bff05969057d9a9b4b8e593a78160a382dce96db6a53
- MD5 7651532c7d8ea53eabb1cbd0f52d5ef1
- SHA1 a73187dd1ce7da56ed140d1a44ff774b4bcc5545
- SHA512 76dbf6041911b28bf8114aa85155b54ce743e5f0e4bd50db96ed96e0b0b21491679741a3b96b2da09e0937fd77702089a238026e05604c0a8e2d0108b0b45b8c
- SSDEEP 6144:rMuigtNmh1E+eIFqehdS5Idv+hZ5fKUMmfph0lhSMXlBXBWfOxVxA:RsMeAwv+hbKUMmfph0lhSMXl+MA
- TLSH T186B4AF95B3E443F9E16BC178C9524A45EB727C864791A7CF03A44AB62F236D24E3F702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3528 AerialInjector.exe 3528 AerialInjector.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3528 AerialInjector.exe