9d89a83771da447bca46422d390521a7778b39eb125778df2b8745f37b77b5c0

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 15:18

Target
MasterstrapSetup.exe
Size 6.4MB
Sample260701-splkzaay51
SHA256 9d89a83771da447bca46422d390521a7778b39eb125778df2b8745f37b77b5c0
MD5 3385758340385dffaf29ddfa02d2b94a
SHA1 a59e39ad94084e70f87c037e9777bbdacf3fc1db
SHA512 a08e1b9617969e2fa2f9e81af46263de71a1306ecd8228f77342b4530b04aa8fc92ddc45ca83568676abb5db18c188bc5726b204de6a2c10272c48aabe8ccad0
SSDEEP 196608:iTARhrY01KSUkc24h8jBHXfrv6DqlNWFSc/xbEIeNQdq:nHrfKKcJh813fj0QcFDmFmE
TLSH
T155663311F3EC0669D5F79AB9E5B10840973279115B32EBDF1BA2006D2DE13C4AE72B63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2080	MasterstrapSetup.exe

C:\Users\Admin\AppData\Local\Temp\MasterstrapSetup.exe
"C:\Users\Admin\AppData\Local\Temp\MasterstrapSetup.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2080

memory/2080-0-0x0000023900E00000-0x000002390109E000-memory.dmp

Download