ad020d09e9628204584bbe1134617d13f3137a1c33c7eba925f2c7d3dee78a22

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 02:53

Target
2026-07-21_12ee1909b54be045b4f58efc7c3417df_icedid_stealc_vidar.exe
Size 3.5MB
Sample260721-ddd97ac19l
SHA256 ad020d09e9628204584bbe1134617d13f3137a1c33c7eba925f2c7d3dee78a22
MD5 12ee1909b54be045b4f58efc7c3417df
SHA1 c7fade1575e8235f1a8ea1806d83b1d125b0b5aa
SHA512 efe1416b2909fdd1d9574120f0a23d807a8856df05252cce7d32ad41c63ab3d8f7fe4389721303dbb09bb330b04b2b8a420029fee6a9ba1c0ad533114dc7f8b1
SSDEEP 49152:9sgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdZkA:hHBSYlO60RzurFjrJYe2KHaw+yVl
TLSH
T1FE061247A9A651E7E936D03CC247452AF6B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2996	2026-07-21_12ee1909b54be045b4f58efc7c3417df_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-21_12ee1909b54be045b4f58efc7c3417df_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-21_12ee1909b54be045b4f58efc7c3417df_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2996