7092349a9b6f278df4d76aade4f54fe0f4cfd9b13e3aca2abcfeb9ec975bb299

Analysis

max time kernel
149s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 03:07

Target
2026-05-28_e4b8943686bae6a615464a4ddb2b2e4a_akira_cobalt-strike_icedid_njrat_vidar.exe
Size 571KB
Sample260528-dml2dsev5l
SHA256 7092349a9b6f278df4d76aade4f54fe0f4cfd9b13e3aca2abcfeb9ec975bb299
MD5 e4b8943686bae6a615464a4ddb2b2e4a
SHA1 6b6a4853ac072a046b6ac37f8509cf84d9b34c8d
SHA512 ef02400919201a3d481541929fc323b28b022c4d18d3aa101f4b590a552e50aeefe56fc3a980d9c64f27e4cd7920852118ef6b7b0ae6a17a7b9b86b3c18faee6
SSDEEP 6144:XgsfSe5yto/LjBKplKkV7ZIxVqYols88xJbXb6Y9vcB7VKxb5V5Myps4cRBOe9:wsyo/LjBAKk748rY19iVyKXn
TLSH
T148C47C5B7754CBF5E07E9178CA514196E6F23C509B71838B4280BA1A3F376C29E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4488	2026-05-28_e4b8943686bae6a615464a4ddb2b2e4a_akira_cobalt-strike_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_e4b8943686bae6a615464a4ddb2b2e4a_akira_cobalt-strike_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_e4b8943686bae6a615464a4ddb2b2e4a_akira_cobalt-strike_icedid_njrat_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4488