9ad7758093a356fe5bd9d49911aaacf766dbb9289b6f3662a8ed3242230f46b2

Analysis

max time kernel
178s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 18:39

Target
Bloxstrap.exe
Size 12.0MB
Sample260810-xavybafk41
SHA256 9ad7758093a356fe5bd9d49911aaacf766dbb9289b6f3662a8ed3242230f46b2
MD5 f408c18edc86d2dc33385c2f11a57fb7
SHA1 84d9e3ef605d7ef184e8e24d6f8c0ec5670fa98a
SHA512 dc66eaa2faf81fb28ad7580977b3741fd93505a7c08cce0831a8f89145dfee278758101454371861ef47fb8ab291e0578809b7b0e50e83721fb05730fea539b6
SSDEEP 98304:CGiOBTscod5DkasbM11f1uD3P9uOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlz:CGiascgsbM1HAUObAbN08
TLSH
T107C66C8533FC1A35E3B74B35A970721A05767C2EA901D79F4B85BA1D29B2380CDE0B67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2376	Bloxstrap.exe

C:\Users\Admin\AppData\Local\Temp\Bloxstrap.exe
"C:\Users\Admin\AppData\Local\Temp\Bloxstrap.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2376