8b6d802cb225c75472310af6f5c56890d9a0155159fd3af0cb9936c1986d9dae

Analysis

user interaction
yes
max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 23:29

Target
Froststrap-v1.1.1.0.exe
Size 18.8MB
Sample260809-3g28vs1scy
SHA256 8b6d802cb225c75472310af6f5c56890d9a0155159fd3af0cb9936c1986d9dae
MD5 a37229592efc3c4503a30e53ba0c6fe0
SHA1 1b1388d077499bea85cb2f053c10d362aa6d696e
SHA512 2edc5c2ea624468a866baf45e5ba6bb9e803004fb5fe59104b238b2af903f9792e6f61721bc30c861aa2f474a71c62875ee061aea4dd179fe06c977c522217a9
SSDEEP 196608:7pjJinjJEgFf+OcO7uHoqQdsyjJmMs4jJ4owvvbsA6+Z20ObAbN0A:9JijJEgFAH2ds2JmMsAJgvQB+Z20IAOA
TLSH
T1E117AE91B7FC1A35D7BB4B359974711A0936BC2E9801D78E2AC8B61D1A72780CCB2773
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2620	Froststrap-v1.1.1.0.exe

C:\Users\Admin\AppData\Local\Temp\Froststrap-v1.1.1.0.exe
"C:\Users\Admin\AppData\Local\Temp\Froststrap-v1.1.1.0.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2620