375374945fd7379efac3d8bebbefb2c6bb3ad576d62a4bc1fad07808251978b3

Resubmissions

04/11/2026, 23:43

261104-3q298a1w4j5

04/11/2026, 23:38

261104-3mt5fa1w2p5

Analysis

user interaction
yes
max time kernel
90s
max time network
68s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 23:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Injector.exe
Size 25.9MB
Sample261104-3mt5fa1w2p
SHA256 375374945fd7379efac3d8bebbefb2c6bb3ad576d62a4bc1fad07808251978b3
MD5 d4a4e18838325b3d77c578ee48df1f47
SHA1 dc623438230f017e7847c2835957cdcc392c7ed3
SHA512 c3bd200205b61d9206cf51a53aebd29d4fbe4d6c4c3da488a67dfb2fb48a8ca878e6744ac11ede1b26197263ef1d95c2b5ad017b3c27e91576734b359797590a
SSDEEP 786432:C3qpYTl/m879C4uvSX8IF2fB+0YRkzHwfu:CeYTl/m87UaLC+0Y+bZ
TLSH
T1A257238B68D5E2F4D3D34A0092CF13DA97D271DBC5DA561E11C6A8033521EDB8B8AD3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

defense_evasion

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 2 IoCs

defense_evasion

Debugger Evasion

T1622

pid	Process
4132	Injector.exe
4132	Injector.exe

C:\Users\Admin\AppData\Local\Temp\Injector.exe
"C:\Users\Admin\AppData\Local\Temp\Injector.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4132

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Debugger Evasion

T1622

Credential Access

Discovery

Debugger Evasion

T1622

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4132-0-0x00007FF660D96000-0x00007FF661D21000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads