f2def980d32c1b3863389950a3b25226d598913e13ca200c41ea5a8f78470dd5

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/04/2026, 18:08

Target
Fishstrap.exe
Size 14.2MB
Sample260426-wra4sshx6q
SHA256 f2def980d32c1b3863389950a3b25226d598913e13ca200c41ea5a8f78470dd5
MD5 3d02a9364737bbc7cff494b3c982cdaf
SHA1 c7bef163ddf5f3ee5de2fb1dfda1295655291baf
SHA512 28263f26fdc4f5a76a35953b026c99dd9131d5e612e40d27a032ec65656870326e7f5cffb7c788645801652348f74321c50747a229926448e3b1006c9b6ab357
SSDEEP 98304:qYMTsy1asIJJsk+ZmD3XzOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTls:qJsyAsIvsk+ZqObAbN0f
TLSH
T1BFE68E8533FC2A35E3B74B35A9B0621E4975BC1AA811D79E2BC4B64D1A72740CCE1B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1916	Fishstrap.exe

C:\Users\Admin\AppData\Local\Temp\Fishstrap.exe
"C:\Users\Admin\AppData\Local\Temp\Fishstrap.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1916