Analysis
- max time kernel
149s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/10/2026, 19:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MydriasisInjector.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
MydriasisInjector.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target MydriasisInjector.exe
- Size 69.9MB
- Sample261011-x958bswthy
- SHA256 0f3b3de56f3c791c0e7f4471a1b672d59a0d2abf5e0e0940b81caafaf7ec2065
- MD5 a0f2dd6b87f0cb5fc7de03168c94ac27
- SHA1 0a07c97a184425f37af31ef45efb322d45951f7d
- SHA512 4deecd92de90afd615c3068a39e15d21f47f9a230e213af0f03635638ab17709b3ae4a1ad001b8028984688aaa0e425f048b11c1414947e0e4d0c56d8ce0be96
- SSDEEP 1572864:5iaXDXn1bI77gCwoMbCcFFjKiWNJGqfEcH3T/Z3:5ZL1bObTMBFFjWNJpj5
- TLSH T192F72356E2FD00E8E57AC0BCCA575517E7B2344513349BEB52A48A692F33BE1AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
pid Process 3600 MydriasisInjector.exe 3600 MydriasisInjector.exe 3600 MydriasisInjector.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3600 MydriasisInjector.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3600 MydriasisInjector.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\MydriasisInjector\B93ZkYo+yC_1I9B4xdTZMWN021VuTL0=\D3DCompiler_47_cor3.dll
- Size 4.5MB
- SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
- MD5 19e527a35241c171d37dc1e6c530053c
- SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
- SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
- SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
- TLSH T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MydriasisInjector\B93ZkYo+yC_1I9B4xdTZMWN021VuTL0=\PresentationNative_cor3.dll
- Size 1.2MB
- SHA256 3fb36edaa2c4fe4ac8be075a3a4e903da159bbe38fb77e51c32b58e2adecb2d6
- MD5 b43c09fd1eab8feb0d9d87e6eeb8fa95
- SHA1 d8935765faf6e12d1d7f7e8b0f54f8e0f077a43c
- SHA512 1432fefe98029f475c0a53e0c551dd917713da346e9b7d5ee5ee5314fb43072cfb24f95b4e2ceef2f67d7f01084d398428b075bf09812a9f90f510f0a40bdfc8
- SSDEEP 24576:mhNpKcF6kPHmTw+MLYpX7T3hjnHFOcJqCPoG5MupGJvaCbztQcfRYQXLFGvHLPa7:mxKcdPHmMLYpX7T35/fPoGPpGFjztQcT
- TLSH T1F0453A22E2E642E5C47FC1B8C646972BFBB07449131C66CB87608B552F67FE0963E364
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\MydriasisInjector\B93ZkYo+yC_1I9B4xdTZMWN021VuTL0=\wpfgfx_cor3.dll
- Size 1.9MB
- SHA256 4b4fdbd1a77ac91a348d3d83a06bc103c6617fdd11445e327b7b6019bcfc1a6d
- MD5 8d8bc2c0a836661c601330f9c184cec5
- SHA1 58e6e5f72e5d51e0cde18f6c7bf296a5bb4d004d
- SHA512 f27e64c6acce5727ce1cfcf3d3fe4ff600fe41643b7886ab1d117724e48d39253702bae381734588eb0d5756cddc73912f109a8d683d090c278075875ad6fa9e
- SSDEEP 49152:CJBarecoR28GPaM6YqVim/oBiEyBhoci/H:0nlkRwiIoBi1BK/
- TLSH T13B955A46B6AC40E9C07AD33CDAD7961BF27174152761A3CF23A0479E6F27BD00A7A361
- MD5 SHA1 SHA512 SSDEEP TLSH