736cc43007761a9e51339431d7e1922f5008b88119b3fcfb7a9d5a92af81d18b

Analysis

max time kernel
148s
max time network
121s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 12:01

Target
2026-07-01_4ed32cb5b8ddbea5b53bbbab2d7c180f_icedid_njrat_qakbot_ryuk_stealc.exe
Size 3.9MB
Sample260701-n7dkvsft81
SHA256 736cc43007761a9e51339431d7e1922f5008b88119b3fcfb7a9d5a92af81d18b
MD5 4ed32cb5b8ddbea5b53bbbab2d7c180f
SHA1 1d6da5c08b77c7a5a18d1e6ac1d4c38d4a7a6b26
SHA512 015183dad436aa6d4ee75c35852ae6cef36cb5bb1558421841cc8f3244f2294e6f167e502b84e0a66c6fce0c54bc59974aba56f043291538713f9e00dd8b10c5
SSDEEP 49152:5PMI/kDFVld7RrPCax05UxIY313YGhi/IvP32sKCJMLuanIyjqJBTryEn6UjXJCY:yNXq/Y3q3sKCKLuanIZJsCP9/67pOp
TLSH
T1F1169E43EEF300AAC03AB679C64B62279631B44D077161DF27BC4634AFB67E05B6A714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1968	2026-07-01_4ed32cb5b8ddbea5b53bbbab2d7c180f_icedid_njrat_qakbot_ryuk_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-01_4ed32cb5b8ddbea5b53bbbab2d7c180f_icedid_njrat_qakbot_ryuk_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-01_4ed32cb5b8ddbea5b53bbbab2d7c180f_icedid_njrat_qakbot_ryuk_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1968