Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    31/07/2026, 03:21

General

  • Target
    2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar.exe
  • Size 1.1MB
  • Sample260731-dwbl1sshja
  • SHA256 c7cd79925e718c17eced99d17ddfe275181d8a174ac85fb8a469eefdc0e19895
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4892

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4892-0-0x00007FFEECEEF000-0x00007FFEECEF0000-memory.dmp

        memory/4892-1-0x0000013DC1430000-0x0000013DC155E000-memory.dmp

        memory/4892-2-0x0000013DA8910000-0x0000013DA8A3A000-memory.dmp

        memory/4892-38-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-30-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-28-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-26-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-16-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-12-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-10-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-45-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-3-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-67-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-79-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-127-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-156-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-153-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-141-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-128-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-123-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-414-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-115-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-113-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-111-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-125-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-120-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-109-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-108-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-105-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-103-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-102-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-99-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-97-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-95-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-94-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-91-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-89-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-87-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-83-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-77-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-75-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-73-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-71-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-69-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-65-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-63-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-60-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-55-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-53-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-51-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-47-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-44-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-86-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-82-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-61-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-58-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-49-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-42-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-40-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-36-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-34-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-32-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-24-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-23-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-20-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-18-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-15-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-8-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-6-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-4-0x0000013DA8910000-0x0000013DA8A36000-memory.dmp

        memory/4892-1426-0x0000013DC31C0000-0x0000013DC3290000-memory.dmp

        memory/4892-1427-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-1428-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-1429-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp

        memory/4892-1430-0x00007FFEECD60000-0x00007FFEED704000-memory.dmp