a31821004528a4170b2bbd485516dc8bd283500c7e74d79d0d2c0ce7985d3de6

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 19:07

Target
2026-08-02_318de4c4cdb9e84d0780985c31ae49d1_icedid_stealc_vidar.exe
Size 3.5MB
Sample260802-xsl35aee62
SHA256 a31821004528a4170b2bbd485516dc8bd283500c7e74d79d0d2c0ce7985d3de6
MD5 318de4c4cdb9e84d0780985c31ae49d1
SHA1 963524dbb625598fae1dc50677e578fe33f9d64a
SHA512 3f86225f6e00a886431edd41eee6706869e11d6b2f7e0139fb1d383cb3358fcbfbab509528166add03e363e2b2974e20493bd12399a1c522e24494a327508827
SSDEEP 49152:/ygQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytd684sY:lHBSYlO60RzurFjrJYe2KHaw+yp8
TLSH
T191F50247A9A651EAE53AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	6452	2026-08-02_318de4c4cdb9e84d0780985c31ae49d1_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_318de4c4cdb9e84d0780985c31ae49d1_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_318de4c4cdb9e84d0780985c31ae49d1_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6452