9186bd0073440c45c9417ac7d2522c6e9abc7c3bab873347edb604c38f198529

Analysis

max time kernel
148s
max time network
140s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 00:26

Target
2026-07-22_0d2486add8d55dbcf14e85b8b1dd9cbd_cobalt-strike_icedid_luca-stealer_njrat.exe
Size 403KB
Sample260723-ardzssed49
SHA256 9186bd0073440c45c9417ac7d2522c6e9abc7c3bab873347edb604c38f198529
MD5 0d2486add8d55dbcf14e85b8b1dd9cbd
SHA1 27d42208c624303a6f90eab0460ef000a4a00f8e
SHA512 5d475a3bee99deca0ac1c4a432651a8437201f8c794a95da8cee7e703211312daa69692a183a954e27aedb091b39e5959cf7e4781ed682bdbe8b76289bff7417
SSDEEP 6144:WKELA/njuvagzrUuIytV7f/kBRWqXk3jTPvZWsFo5:WKiUMag/UuIkRHTPBRFQ
TLSH
T1BE94AE56D3E525E5E8A38139C952C603E7B2BC560720DB9F12A076593F333D1AE3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemEnvironmentPrivilege	3704	2026-07-22_0d2486add8d55dbcf14e85b8b1dd9cbd_cobalt-strike_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-22_0d2486add8d55dbcf14e85b8b1dd9cbd_cobalt-strike_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-22_0d2486add8d55dbcf14e85b8b1dd9cbd_cobalt-strike_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3704