a6f1277b97bfaf67a0d58f4adbe611e3b728bc5430e855a23d6441d15f20bbb0

Analysis

max time kernel
150s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 01:54

Target
Kittystrapper.exe
Size 11.3MB
Sample260905-cbm9msvcmd
SHA256 a6f1277b97bfaf67a0d58f4adbe611e3b728bc5430e855a23d6441d15f20bbb0
MD5 ae95ea2af9e4efc48a35d56341f97e9e
SHA1 5ae849cbe5367c8659d2e7c84bdb32556d859d13
SHA512 e3fe01f8e323da7609b9843cbd5182a39caf1f96066c7455431bc1f28bca18dca450d84a7df28a38f0e3625cfd9746580637d1093000ea4084192708adc56483
SSDEEP 98304:d3+yylLYs0D3kOYoHwfLk3vSmaR0+Mc4AN0edaAHDfysrTlI:duyylUsDObAbN0L
TLSH
T1BCC68C55F3FD0B25F2BB4B35EDB1A2111876BD26A911E7CE4A09A61D0872380CCB1B77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4956	Kittystrapper.exe

C:\Users\Admin\AppData\Local\Temp\Kittystrapper.exe
"C:\Users\Admin\AppData\Local\Temp\Kittystrapper.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4956