28433b779173d74ecd0137f3738f62e1d2b1105c517eb34bd5a68725c7d90eaa

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 01:57

Target
2026-07-05_069d42334a0dfca189bda6224cda64a8_icedid_stealc_vidar.exe
Size 3.8MB
Sample260705-cdsl5sgv71
SHA256 28433b779173d74ecd0137f3738f62e1d2b1105c517eb34bd5a68725c7d90eaa
MD5 069d42334a0dfca189bda6224cda64a8
SHA1 d13088db3002f762a09b7447c8edce80ca8c67dc
SHA512 f2aba1b721cac2a8f10076ab3f2c04d742a2c01b64321577633ef5fbe8a5394b5a5fbc980848b49960d7f41b7723d48c78f125302f49d96eb2db7ab3e14c3ec4
SSDEEP 98304:1HBSYlO60RzurFjrJYe2KHaw+y5N2jffm17:3CRqrxOeYah7
TLSH
T1D1061257A9A651EAE53AD03CC247452AF7B1389283A2D7CB434446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1480	2026-07-05_069d42334a0dfca189bda6224cda64a8_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-05_069d42334a0dfca189bda6224cda64a8_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-05_069d42334a0dfca189bda6224cda64a8_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1480