fb1c45055dc6ad9621280940f63a0d0c5e8152815a0963eb732e96072d4506c0

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/05/2026, 17:28

Target
2026-05-11_ca7450447f1ba01c693cce2f7fa38335_glassworm_icedid_stealc_vidar.exe
Size 44.0MB
Sample260511-v155vsfx5y
SHA256 fb1c45055dc6ad9621280940f63a0d0c5e8152815a0963eb732e96072d4506c0
MD5 ca7450447f1ba01c693cce2f7fa38335
SHA1 8839d7373150a90da2d20e9ba95f090790acda77
SHA512 91d8d71b737df269f2edfa1d288f5c34d9f146190f79f73d16a10fd3e175969241b08831433fceb6293dbfc1ced7762ca96946c3d9ed9088e7847837339912be
SSDEEP 786432:WT/pPKB2QBKA3VvA1XtzKGQmgtYcrME2eh4Rqwm9pWqRn0l:W9m2UKgKdtHQmgum2eh4ww0YQ0l
TLSH
T1D5A7331633E9416AF5F76BB195B106108BBABC9A7F75E78F0A58016D0E73B805E60333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3880	2026-05-11_ca7450447f1ba01c693cce2f7fa38335_glassworm_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-11_ca7450447f1ba01c693cce2f7fa38335_glassworm_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-11_ca7450447f1ba01c693cce2f7fa38335_glassworm_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3880