81cdcac0a024eaf8259d121bca54a7fc2446c82372359ef9a094bd135dc17b3b

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 01:52

Target
2026-07-28_0bb7b5c3f0ae00988ff261143934b59e_icedid_njrat_remcos_vidar.exe
Size 5.8MB
Sample260729-cac3aaen8s
SHA256 81cdcac0a024eaf8259d121bca54a7fc2446c82372359ef9a094bd135dc17b3b
MD5 0bb7b5c3f0ae00988ff261143934b59e
SHA1 5161edc6d375b02b584fe84437f1d5fdf2bf1704
SHA512 5f751b50ca98980fe4dc50d541592567c5672d284f6e6819e450d735913dccaf6caf28cf34d1f0e1ca48d1bea4d0659c3ae0c233d48b84bb23b0689378c94596
SSDEEP 98304:nSKC2JFRJVO9ViZmglGmfZ+SKIsBCQgPdMisYUxmGEx+4AJPzWLH:ST2JG9ViZmTmfZLyCLzsYUUGExTAJzk
TLSH
T1F7561256E76880F8D027D134C9A78685E2B27C460B748ACF02E0776A6F33AE51D7E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	6132	2026-07-28_0bb7b5c3f0ae00988ff261143934b59e_icedid_njrat_remcos_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-28_0bb7b5c3f0ae00988ff261143934b59e_icedid_njrat_remcos_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-28_0bb7b5c3f0ae00988ff261143934b59e_icedid_njrat_remcos_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6132