Analysis

  • max time kernel
    150s
  • max time network
    159s
  • platform
    windows7_x64
  • resource
    win7v20210410
  • submitted
    21-07-2021 21:10

General

  • Target

    stin.exe

  • Size

    558KB

  • MD5

    31e8c459191e48965eba2e6e50f9f70c

  • SHA1

    2635112b75a180aa8a3fa31efc5c23b7b3d60b0d

  • SHA256

    2b0f36a54f41ddf97236593602090cfcbc4d550c6cdca08d09a483b3d5b7ba6c

  • SHA512

    251da0e723b1a4efafad5c9671f9b93b7ff88a8e0a9adef53e5705442b50a383d665e1252d34d0b1eea9191d297b319f2a926489a66b165a6b9fcdc3f895d315

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 24 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\stin.exe
    "C:\Users\Admin\AppData\Local\Temp\stin.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1104-59-0x0000000075EF1000-0x0000000075EF3000-memory.dmp
    Filesize

    8KB