Analysis
- user interaction
yes - max time kernel
12s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/09/2026, 12:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
injector.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
injector.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target injector.exe
- Size 8.8MB
- Sample260912-py6eysca79
- SHA256 1a8b3d72d895d03b171c138ce4f22000e5c2efefd1c73073dac932c687739ce3
- MD5 546f97c0ada80edf878b735b739892f0
- SHA1 abdcdd3de2bd979dd8dae03304565800d29a9c5b
- SHA512 75d2097f83cf5249d4597bd8f6fd124f27b364096717f10dbc3e74167b8ff689f3f98649a7cad2718b37026b7d04117960bf2557e50fae671acca4ebc9302aaa
- SSDEEP 98304:ggOzuoNdBkhzrCpwvzHbbWVOJ3/O20xS7pgTPS3kEPq6ClCZnDgwBJ74MAl+x5lg:tM9KDqObkEPq6ClCZgWyMAl
- TLSH T100965C217B5B94BCC156C874C30B4A225E6570CB0B35B9FB74CC41393FAAAF81B39669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language injector.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000_Classes\Local Settings injector.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4308 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\injector.exe"C:\Users\Admin\AppData\Local\Temp\injector.exe"1⤵
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:4268
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:4308