2a9207b1196c163a94f011ac1ee72ee6fe2e9c104d1f59988c2d948859bfdfdd

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 02:42

Target
2026-06-02_e1464e84d53f492503c01e445e38a505_icedid_stealc_vidar.exe
Size 3.8MB
Sample260602-c685lab17y
SHA256 2a9207b1196c163a94f011ac1ee72ee6fe2e9c104d1f59988c2d948859bfdfdd
MD5 e1464e84d53f492503c01e445e38a505
SHA1 aef8c2973f2025f3aa8fedf13785bf10ea8af8e3
SHA512 55a5458ba57e8d0b51b6e0238969ab062d612f905d36fdc5abe44699cfcacc32cfcd32e1e4b9f97cd97ff20c9b5a80331dbbf0b4c3f679bbef3702ca1a5e4309
SSDEEP 98304:JHBSYlO60RzurFjrJYe2KHaw+yx+ijed6:jCRqrxOeYm+keU
TLSH
T139061247A9A651EAE47AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3172	2026-06-02_e1464e84d53f492503c01e445e38a505_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-02_e1464e84d53f492503c01e445e38a505_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_e1464e84d53f492503c01e445e38a505_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3172