a9c6810c3602bb36f394c77eba85e7839d91aefaffb174ded932fadc7e41b07b

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 07:37

Target
2026-05-09_2282bb3b42ce361970e78f9f5f5c488d_icedid_stealc_vidar.exe
Size 3.4MB
Sample260509-jgbw5acx4w
SHA256 a9c6810c3602bb36f394c77eba85e7839d91aefaffb174ded932fadc7e41b07b
MD5 2282bb3b42ce361970e78f9f5f5c488d
SHA1 7e0e71adebdf9b69685b29d88b790df9d5b9b197
SHA512 6b2ef4a8ac1b4ece78009c2de97f930c4125f3fa14123ffc1aaef376c52f5400b838af71258cb7fcf7936b4637b885c482714b95318e3e8edc6da43d137033a4
SSDEEP 49152:36gQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdHY:lHBSYlO60RzurFjrJYe2KHaw+yzY
TLSH
T19CF50247A9A651EAE53AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4660	2026-05-09_2282bb3b42ce361970e78f9f5f5c488d_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-09_2282bb3b42ce361970e78f9f5f5c488d_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-09_2282bb3b42ce361970e78f9f5f5c488d_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4660