523bfbe51e191decb55278a98f4a68057be08374273f4d158fb558968981e28e

Analysis

max time kernel
150s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 23:45

Target
2026-06-25_1e4a0a092a2f1e5e20bb0488fb8da20e_icedid_njrat_vidar.exe
Size 226KB
Sample260629-3rperaa12m
SHA256 523bfbe51e191decb55278a98f4a68057be08374273f4d158fb558968981e28e
MD5 1e4a0a092a2f1e5e20bb0488fb8da20e
SHA1 08edca07e9bbf0c670bbc548f81fab9612772451
SHA512 35ff5a66483ba2783b002fcd3ae90688e320e77c8842f3a30375d26080f8bb15b97d4ea796a357d47b7655a3dad2c8183c9ce21ec8c4b399d017eee548a46a91
SSDEEP 3072:SdbmHzrahFVnrm5TPlqV+I3IE87LYmfeHvcTNmdcrA2Ndno1QR:4SHYrm5TDQIZ9RE+rA2PoC
TLSH
T1DF346C1673A80DF8E5B7C639CD52C916E67778060B70DACF03A4422A5F277A19E3DB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	6192	2026-06-25_1e4a0a092a2f1e5e20bb0488fb8da20e_icedid_njrat_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-25_1e4a0a092a2f1e5e20bb0488fb8da20e_icedid_njrat_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-25_1e4a0a092a2f1e5e20bb0488fb8da20e_icedid_njrat_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6192