Analysis
- max time kernel
150s - max time network
159s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
- submitted
01/09/2026, 20:40
General
- Target stinky_auto/archive/lib_win.dll
- Size 21.6MB
- Sample260901-zf2n6aar21
- SHA256 be03bbecbf14b03458de36c8b3848c1b7325ad0aeb6a61b6e0f9206fc40b4af7
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\stinky_auto\archive\lib_win.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4404-0-0x00007FFC9D0A2000-0x00007FFC9DE3B000-memory.dmp
memory/4404-2-0x00007FFCBB7A0000-0x00007FFCBB7A2000-memory.dmp
memory/4404-1-0x00007FFCBB790000-0x00007FFCBB792000-memory.dmp
memory/4404-3-0x00007FFC9CD80000-0x00007FFC9F3DF000-memory.dmp
memory/4404-7-0x00007FFC9CD80000-0x00007FFC9F3DF000-memory.dmp
memory/4404-8-0x00007FFC9CD80000-0x00007FFC9F3DF000-memory.dmp
memory/4404-9-0x00007FFC9D0A2000-0x00007FFC9DE3B000-memory.dmp