fa31ec224834c1b75c70ff81bf0707719db1db5a5869008f789f11fa3774835e

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 02:34

Target
2026-08-02_d0b4c1d9f64adca108f49c3035f8716b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 293KB
Sample260802-c2ys3a1zbs
SHA256 fa31ec224834c1b75c70ff81bf0707719db1db5a5869008f789f11fa3774835e
MD5 d0b4c1d9f64adca108f49c3035f8716b
SHA1 5f089c13c46844466808253b96cbc1fbf2b34a61
SHA512 5cd03fab808797d6b2abb61442aaf4369a38a5d38e58a41f5503323923c14f9cd97190c3a4dd345da9d140cdeb20f25e3c382cf91d489015fb9e8a0bd82ae02a
SSDEEP 3072:J+qMdKmZ4amyFNr6Dgz1ypi9qQ6DiCALBdgnSAFiUYLv5wPVX9Zzjb3R2NRN8fA8:Jn8T7Rui9qp3ALkn7HxfVz
TLSH
T185547C59F3A550F9E9AB813CCD420506E672BC464761EBCF13A04A973F276E09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	5388	2026-08-02_d0b4c1d9f64adca108f49c3035f8716b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_d0b4c1d9f64adca108f49c3035f8716b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_d0b4c1d9f64adca108f49c3035f8716b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5388