Analysis
- user interaction
yes - max time kernel
23s - max time network
25s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/08/2026, 02:38
General
- Target Extreme Injector v3.exe
- Size 1.9MB
- Sample260827-c4117sdj2x
- SHA256 0ac3387b6e0283c972722c2a6664ee23ac5ba10640d18b827e8732f5c57e7d2c
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Suspicious use of AdjustPrivilegeToken 42 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Extreme Injector v3.exe"C:\Users\Admin\AppData\Local\Temp\Extreme Injector v3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1316-0-0x00007FFB7A3DF000-0x00007FFB7A3E0000-memory.dmp
memory/1316-2-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-1-0x0000000000240000-0x000000000042A000-memory.dmp
memory/1316-3-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-4-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-5-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-6-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-7-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-8-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-11-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-12-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-10-0x000000001E730000-0x000000001E76C000-memory.dmp
memory/1316-9-0x000000001B180000-0x000000001B192000-memory.dmp
memory/1316-14-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-15-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-16-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-17-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-18-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-19-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-20-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp
memory/1316-21-0x00007FFB7A250000-0x00007FFB7ABF4000-memory.dmp