ae59bc70fa66177a053fbe1f78f622d3a0b9d4c4723fd890fa84492cc06d5da7

Analysis

max time kernel
149s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 12:20

Target
2026-05-04_d37d6fd156bcdd312c11b0e344940de4_icedid_stealc_vidar.exe
Size 3.4MB
Sample260504-phtffse19q
SHA256 ae59bc70fa66177a053fbe1f78f622d3a0b9d4c4723fd890fa84492cc06d5da7
MD5 d37d6fd156bcdd312c11b0e344940de4
SHA1 18a580173f9783c55e3bf29ed3bca911812bc469
SHA512 9112edbab7280cfb04f102582305942fb5500b92eef727f94a5be2e1f3c0d6af49dd6f416a852962bf123e46da4777db3c328eea99c44a90e49d7c7b2f50ba34
SSDEEP 49152:NHgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+yt1:WHBSYlO60RzurFjrJYe2KHaw+y
TLSH
T16AF50247E9A661EAE53AD038C247412AF6F1389543A1D7CB834486D73B733F85A3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2088	2026-05-04_d37d6fd156bcdd312c11b0e344940de4_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-04_d37d6fd156bcdd312c11b0e344940de4_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-04_d37d6fd156bcdd312c11b0e344940de4_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2088