4fb030b137047c127b134051efb187c44b4fc13308cbb8c0dfb94de2627094ae

Analysis

max time kernel
150s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 14:24

Target
stinky.exe
Size 23.0MB
Sample260802-rq7ddsvdjf
SHA256 4fb030b137047c127b134051efb187c44b4fc13308cbb8c0dfb94de2627094ae
MD5 9f2c5ed3edd22492748e946533df0edc
SHA1 3b3f4cc501ceb0027ef80a646d43db2c31639d9d
SHA512 e30e463f14e0f85175e620c56c567c382a9d5c8329448ef8d3133be99772ff4ec14d7c66421b4f08d4ea982ce8718cf083e2442ab752a80c148919e33e8d755f
SSDEEP 393216:O2uL8awiLSKtiAT51av8CIeSmS80v7qnQxkoJp9sObdBzWt5KYv/U:O2ugaw5KtiVv8CyvenQyoJfbP
TLSH
T19E3712C678E191ECD397CA30D7CA6AF8D2DA768A0CB9542F6FCA04022631D51CDE5D36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
4408	stinky.exe
4408	stinky.exe

C:\Users\Admin\AppData\Local\Temp\stinky.exe
"C:\Users\Admin\AppData\Local\Temp\stinky.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:4408

memory/4408-0-0x00007FF62F7BE000-0x00007FF630542000-memory.dmp

Download