77d9ae87fee87a24dde29c878a2c3ad61900a6913f0f67429d9b3cf147a0ba3d

Analysis

max time kernel
149s
max time network
110s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 16:08

Target
2026-05-11_837d727e13d9f850ed09bab34d28fd27_icedid_stealc_vidar.exe
Size 3.4MB
Sample260511-tle5fshw8n
SHA256 77d9ae87fee87a24dde29c878a2c3ad61900a6913f0f67429d9b3cf147a0ba3d
MD5 837d727e13d9f850ed09bab34d28fd27
SHA1 4a0576ff353d87bc281d23f73fc9946901c90ca7
SHA512 b626bd3d123ef2906aec4acc98adc4e9054d9f5c25218fb373b4bdf73fb786a31128c814c706127576e037108c6a1f64a9d5b4919c9bbb0aee9508aa58052306
SSDEEP 49152:ZlgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdQ:0HBSYlO60RzurFjrJYe2KHaw+yE
TLSH
T1A7F51247A9A651EAE53AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4960	2026-05-11_837d727e13d9f850ed09bab34d28fd27_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-11_837d727e13d9f850ed09bab34d28fd27_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-11_837d727e13d9f850ed09bab34d28fd27_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4960