15aaed03abe9f1aedb889bb43d5c568a7e7ab3e4deaadc5c2060a8363acf5698

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/06/2026, 01:27

Target
2026-06-03_33a5a2f7811531abfd03e4e5ce84b910_icedid_stealc_vidar.exe
Size 3.8MB
Sample260603-bvbvaahw3j
SHA256 15aaed03abe9f1aedb889bb43d5c568a7e7ab3e4deaadc5c2060a8363acf5698
MD5 33a5a2f7811531abfd03e4e5ce84b910
SHA1 a2ccfc7b929f48a1e9ac60ce41c439007eee4df4
SHA512 d05de319947e09a53fe8d817096ccd62b924498bbe54bcc5c9c967140d275cc6194c4e845f95e8e48dda7fc1d8113159b602279b362b79b635ebeb00fc30e471
SSDEEP 49152:E7gQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytd+BzEz/Cu4A:LHBSYlO60RzurFjrJYe2KHaw+y8zsCdU
TLSH
T17F061247A9A651EAE536D03CC247452AF7B1389583A2D7CB8344469B2F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5012	2026-06-03_33a5a2f7811531abfd03e4e5ce84b910_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-03_33a5a2f7811531abfd03e4e5ce84b910_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-03_33a5a2f7811531abfd03e4e5ce84b910_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5012