2fa886e60da9ebaf7ef53d8053fe8042a36ec0fd69596feab9f499e4655446a0

Analysis

max time kernel
149s
max time network
148s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/05/2026, 01:56

Target
2026-05-22_08454c58c853d4ca33af7433009f598f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 297KB
Sample260522-cc1w5act2k
SHA256 2fa886e60da9ebaf7ef53d8053fe8042a36ec0fd69596feab9f499e4655446a0
MD5 08454c58c853d4ca33af7433009f598f
SHA1 a556e399fbdbfc9e0abc283822a5398e23348402
SHA512 3e6c787300a130038263465a2fb9215963900649bf1692b42f0f433c03b308e03d894a2a94e601993cc07740cbb1224e0188010e6acd276e778562601455cc96
SSDEEP 6144:LQ90BSu/wyKo739kIbo3MDPTbDP3sH0wASAuji:kCwuI8NkIbo30bDPcbAo
TLSH
T136548C16B3A514F8ED67827CC9568A02E7B2BC164760D7CF03E086663F272D1AD3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5828	2026-05-22_08454c58c853d4ca33af7433009f598f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-22_08454c58c853d4ca33af7433009f598f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-22_08454c58c853d4ca33af7433009f598f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5828