01cc53420932274ff52691a4c85dc539d0ba543e187e56c7440db2611486995b

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
28/05/2026, 10:20

Target
2026-05-28_9b44747c6466ab067ef2cebfc0add53b_cobalt-strike_icedid_luca-stealer_njrat.exe
Size 327KB
Sample260528-mde16acy2p
SHA256 01cc53420932274ff52691a4c85dc539d0ba543e187e56c7440db2611486995b
MD5 9b44747c6466ab067ef2cebfc0add53b
SHA1 f66ad69af62f1ef81ed1494190d173ee75cb46c8
SHA512 06df110fdc11cd2f3dd53167b9b1fe733bacf84294213a19644728186466c29c95586af616092ebad87d6699669a7e9326b01d1f6d51c8f72980c33fbe7ec8d4
SSDEEP 3072:D6V4bDKEMdUcbOWOInR48xwTKMCTFwJG8514t3Lf4Bnld45110AVjaNDaN48WwBg:Y4jMdTKBorwTlCTAV54YlMYBRx+Fc9q
TLSH
T1BD64AF55A3E518F6ECB3813EC9528607E7B2B8460720DB9F13B446156F237D1AE3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemEnvironmentPrivilege	4740	2026-05-28_9b44747c6466ab067ef2cebfc0add53b_cobalt-strike_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-28_9b44747c6466ab067ef2cebfc0add53b_cobalt-strike_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-28_9b44747c6466ab067ef2cebfc0add53b_cobalt-strike_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4740