3e80165031e5371a42f6b2aafdf1da1cda413d3c5320cc3d0f235eb94ac1986e

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 14:16

Target
2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc.exe
Size 10.3MB
Sample260802-rlahvsvcjf
SHA256 3e80165031e5371a42f6b2aafdf1da1cda413d3c5320cc3d0f235eb94ac1986e
MD5 725e41a8940bb6a1eef7cba4c5207e62
SHA1 6bfbb11e4b7b16f153197732f6b2a86184496a7e
SHA512 4823d1c8a0030e305781889272db0fac99e4fea1b8a24bc21689804a4378f4cf5876e065b910845fab0674a378f227dd1f8460021854f12741ec40d426c48c6c
SSDEEP 196608:BQAvSn/nOkF38DB4itoE51m7KoXn5hhhNdBeAvo71F4M6:uGkF3m6itrXdoXvjvCP4
TLSH
T1FDB61345E25606BCCF63D378845A527BF6B17DC903A49ADB27CA49316F13AF42A3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5356	2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_725e41a8940bb6a1eef7cba4c5207e62_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5356