01b462fac739373d94f315b0f1d25aa05df04a3e7a717bd6a76058a24e5c5ba0

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 02:43

Target
2026-07-16_ce8b4abb8372d167561d2d5be1465a19_cobalt-strike_icedid_njrat_stealc.exe
Size 552KB
Sample260716-c7n6tabw2k
SHA256 01b462fac739373d94f315b0f1d25aa05df04a3e7a717bd6a76058a24e5c5ba0
MD5 ce8b4abb8372d167561d2d5be1465a19
SHA1 a220547502dd4d5f1deafb87ac68d1819303e60d
SHA512 e25a963c20ced8967c47f3ac4ac3d998f180d3446cb9a5807c0f225050f5ca34142fc56c66fa6dcc7f9aaf62723b304b85bdb6cb98b01fb31b942aadc7f7c736
SSDEEP 12288:peqqwQSoKGsfcArK88S+SXwrDFt0YTZfau:peqqwQ/4brK9Sh0DTf
TLSH
T124C46C95B2A413F9D1BBC1788E838916E772784907759AEB13E086B61F33AD05F3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4544	2026-07-16_ce8b4abb8372d167561d2d5be1465a19_cobalt-strike_icedid_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-16_ce8b4abb8372d167561d2d5be1465a19_cobalt-strike_icedid_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-16_ce8b4abb8372d167561d2d5be1465a19_cobalt-strike_icedid_njrat_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4544