e2e46bc9dd1af092e7290bf00652a0e3de527496351b1a26f5a9f04ffdafeba9

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 08:48

Target
2026-08-02_4517b569c918a3ea2a190f701c15fb2d_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Size 885KB
Sample260802-kqqbjsfh22
SHA256 e2e46bc9dd1af092e7290bf00652a0e3de527496351b1a26f5a9f04ffdafeba9
MD5 4517b569c918a3ea2a190f701c15fb2d
SHA1 32cf7dc1a358f95e24dddce99f741462ef11e385
SHA512 dff67ff1a3eb6b0358cf681fa85fa89dc69212aabd1854893113bbee50faa7cc1ae9a652050b19813ec363084d25ac754c524e94edb14eb63b08da5d13e1d184
SSDEEP 24576:qDKg6uqRPjmuSjeTZC40G4GujGGC5SYCI:qDKg6zZmjeTkvG4Il
TLSH
T1B215392DE6A801AAF16E9279EC550706E3B37F15037196CB32A076591F376E08F3AF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5664	2026-08-02_4517b569c918a3ea2a190f701c15fb2d_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_4517b569c918a3ea2a190f701c15fb2d_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_4517b569c918a3ea2a190f701c15fb2d_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5664