e136f752a1b0a80d15acbd0a91868616c7cc55ffe3111629dedf91bf4bc35666

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 20:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Injector.exe
Size 32.0MB
Sample261020-yr6a2set6x
SHA256 e136f752a1b0a80d15acbd0a91868616c7cc55ffe3111629dedf91bf4bc35666
MD5 ef974c7131de66969124d755c3404121
SHA1 d705ccdbcc5b21d1c7de121fa54853f39c03a848
SHA512 279adf71c5f13b26ffda21f5b94e8d045209c9135bb4388d716b19d92aa290dcee04ffea46ef71fa473313ed81e05de1eff3a15def945af54fe2fe3d2adf5488
SSDEEP 786432:zF5wqZgO6l0viFYhzgmXbiQo4Z5hT5NLP:fwqZnhzgmXI8R
TLSH
T1D6772396B5D6B1D44BC21984238E42DB21D2E5FE81FE45393BCB5C02A434EEB468DE73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4036	Injector.exe
4036	Injector.exe

C:\Users\Admin\AppData\Local\Temp\Injector.exe
"C:\Users\Admin\AppData\Local\Temp\Injector.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4036-0-0x00007FF624AE4000-0x00007FF625E07000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads