d3a66023c4a04b13b7df0159930f748f309c1307b1bccbd022bacdd68d878f35

Analysis

max time kernel
150s
max time network
119s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 12:36

Target
Fishstrap.exe
Size 14.9MB
Sample260916-ps5apsbm5z
SHA256 d3a66023c4a04b13b7df0159930f748f309c1307b1bccbd022bacdd68d878f35
MD5 a0c3321ff616288101e1184e9d5c5af3
SHA1 261e6651e2c1fbc710df2e63135333d0f6a838dc
SHA512 ef6e6594aaf98c0bfd1e86c541fa06effc417f5db7ccd7b796e0624d12f615297512099e331de4416fa37fb1e3b9e944fbcfce32a127a536399b42b255d34ae4
SSDEEP 98304:hlE7JmE7FIAUxdgeTsTE7OVfasIYyFLjW/sa+ZmD3JxOYoHwfLk3vSmaR0+Mc4AI:hSHDUsYsPQsIjKsa+ZWObAbN0z
TLSH
T12AF68E8573FC2B35E3B74B35A970621A4976BC1AA911D78E2B887A1D1972340CCF1B73
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4264	Fishstrap.exe

C:\Users\Admin\AppData\Local\Temp\Fishstrap.exe
"C:\Users\Admin\AppData\Local\Temp\Fishstrap.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4264