50aea0bdaa4b8b33f307c3a13e85f920e46ef0d2e08650f4709e7a1dcedd978d

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 04:25

Target
2026-07-31_200199b39e309c7d16a3f2fdfef14a71_glassworm_icedid_luca-stealer_njrat.exe
Size 2.1MB
Sample260731-e13rqsap7w
SHA256 50aea0bdaa4b8b33f307c3a13e85f920e46ef0d2e08650f4709e7a1dcedd978d
MD5 200199b39e309c7d16a3f2fdfef14a71
SHA1 f55961ed1975715083d7e06077fd42cd5927321e
SHA512 e890db07afb61abd753c693dfd6b1efbcbded3764a45528846c00abba6d96e87ac6025b23ce4323ae4c79471dcb1b3bd5c74a80b6bf9b4d5bafc07705fd69a2b
SSDEEP 49152:dbVwASOTGtlq2JIU6iu7mYYgOZqMAkMrO0zN/2K3ngVOPmxR2:Ou+uqz0Bh3wxR2
TLSH
T1D2A58D55A7A801F8E9F7C138C956453BEBB1B46A13B09BCB05A0C6B50F13BE05FBA750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1324	2026-07-31_200199b39e309c7d16a3f2fdfef14a71_glassworm_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-31_200199b39e309c7d16a3f2fdfef14a71_glassworm_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_200199b39e309c7d16a3f2fdfef14a71_glassworm_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1324