a12304d3ed387954d8acfe31b29abb1674c0708b5abcf69d8cb04f22c3fcb3c0

Analysis

user interaction
yes
max time kernel
140s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MasterstrapSetup.exe
Size 7.9MB
Sample260809-rdrr6ssvaw
SHA256 a12304d3ed387954d8acfe31b29abb1674c0708b5abcf69d8cb04f22c3fcb3c0
MD5 62d1e62a0751891b682007a8aaed6cfe
SHA1 615d42e5b25de979475757361f3bf9da20ab00cb
SHA512 b9bce3566a5402745b68ae79581aac8844d24a0d917aa4774897205ea9123458e60f68b45a21b1652f30dc26e886734eae5c719c4ecf44e3b95d8fdcd5bdb6b5
SSDEEP 196608:6UqbkzuSGADk27gxloYiwZ28sGJ7FLT1G1tbAUqCiNM0oIk0:5uUDXcwcBsGJ7F5e1ulZoc
TLSH
T141863312B3DC0AA2E5F78B35D57108409732BE616BA7EADF276054AA2DF17C09C71363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4440	MasterstrapSetup.exe

C:\Users\Admin\AppData\Local\Temp\MasterstrapSetup.exe
"C:\Users\Admin\AppData\Local\Temp\MasterstrapSetup.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4440

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Masterstrap.exe

Path C:\Users\Admin\AppData\Local\Masterstrap\Application\Masterstrap.exe
Size 213KB
SHA256 64e1e01f9df6718a95ceee1d07489e48b4c3a41cbc256e917f54a3b6d4a7528d
MD5 d804844b994e10e2ac32ddd0d8aa4707
SHA1 00b9fb18cf0fe7cad746796f7f4d091b60a13ff7
SHA512 91d9d9ec9401ce3f1eea7e37a71d5f4ef8bbade72176bacbb6dbf67e1dec0583ccdd18fcb40e9d38ca14c98a71e1a3c06008cf5ced6858bc827ec68ba3d1bcbf
SSDEEP 3072:xqvmgiYSo4k8uIPzlSRwa/5B26m9Igok+F45ZVKygjGSqcRqA8EH5pE:x6ok83LlMvvqIgi456yY1HT
TLSH
T1D4248D07E2AC51BEE1B7C679C9924C41FB7278158B71A7CF07504AB61E77AD0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download