10715f7321fcf50ee7a7cbdeb46035634c3aa4bf314cfd02a0aa1c16d34b0669

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/06/2026, 04:40

Target
2026-06-27_9bc69b5b9a0e208b10c827d293d082cf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 11.0MB
Sample260629-fa2x7ads7v
SHA256 10715f7321fcf50ee7a7cbdeb46035634c3aa4bf314cfd02a0aa1c16d34b0669
MD5 9bc69b5b9a0e208b10c827d293d082cf
SHA1 ab4c6057954ab6fc9876bfecab7b4c984b5767d6
SHA512 624f7ca43962e8d480aa3f538ff91dd6c777399cb77c4b2624effb8ade932eab4d7c672a6cd4ce5bc90e6af8da0d59b22d16bd54b23af5bc22b0d1fdda4c9b75
SSDEEP 49152:tg9H/qoiwmX7ldbnb8hYI2PFgevvF+20DlSFBqgAK/wj5BykfcTpniZTHebm4Cy3:sHUD52ykKnZViQ43TLh6400HzPFC/a4
TLSH
T101C6F606B7F951D8F5BAD674A97B652AEE32BC618B3083CF1150560B0F32ED48E39721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5484	2026-06-27_9bc69b5b9a0e208b10c827d293d082cf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Token: SeIncBasePriorityPrivilege	5484	2026-06-27_9bc69b5b9a0e208b10c827d293d082cf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-27_9bc69b5b9a0e208b10c827d293d082cf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-27_9bc69b5b9a0e208b10c827d293d082cf_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5484