e0eac9e4295d85193c8f655b2a108a946ee995ebf4d535793304fa29fb0077e2

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/04/2026, 16:42

Target
2026-04-22_6721533d5749a397b8f892b3785e88dc_icedid_stealc_vidar.exe
Size 3.4MB
Sample260422-t734eaf151
SHA256 e0eac9e4295d85193c8f655b2a108a946ee995ebf4d535793304fa29fb0077e2
MD5 6721533d5749a397b8f892b3785e88dc
SHA1 1ce1ed4073f35c4bf459f87e473431fbb13c8ccb
SHA512 6209cad72324e8ee63645aa48354810334a84a50869fb0263bddd3ee1550b7d18c2eda860fa4161f575626e13c0103e7f6f21eb4113095d14ac628ef7f0aa8db
SSDEEP 49152:5VgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytA:wHBSYlO60RzurFjrJYe2KHaw+y
TLSH
T12BF50247A9A650EAF57AD03CC247412AF6F1389543A1D7CB8344869B2F733F85A3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2776	2026-04-22_6721533d5749a397b8f892b3785e88dc_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-04-22_6721533d5749a397b8f892b3785e88dc_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-22_6721533d5749a397b8f892b3785e88dc_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2776