8eaa5ea0be47980320b36e98a083e9b3565acc9eb4250cdc41614f600a314c0c

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 04:24

Target
2026-06-01_8c8bda635830ca1231a5958f9e4ea4b0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 423KB
Sample260601-e1wcnaev9k
SHA256 8eaa5ea0be47980320b36e98a083e9b3565acc9eb4250cdc41614f600a314c0c
MD5 8c8bda635830ca1231a5958f9e4ea4b0
SHA1 ca72a3b6030886e5a3fdbedbc1a281efce51cbf7
SHA512 f2d1273017c8453872c35ae82d81edcd0b1e9e025e8c4cf718c1102561ee6a464034a30977474046b06e3dcbe5ade6e0297689c323707cffa2c926e5b4701160
SSDEEP 6144:vexjCEELRdq261+d4qO6uvXpOOtXmKGR2Ndt5PJPKkwCeyqMPn2:vUGWWd4qOXvJtXm12NrCkNqMn2
TLSH
T1E4948D5AF76400F9D16BD138CD534546EB71BC4A4760EACF13985AAA2F336E08E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1704	2026-06-01_8c8bda635830ca1231a5958f9e4ea4b0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-01_8c8bda635830ca1231a5958f9e4ea4b0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_8c8bda635830ca1231a5958f9e4ea4b0_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1704