Analysis

  • max time kernel
    145s
  • max time network
    141s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/08/2026, 02:52

General

  • Target
    2026-08-03_2d1cefb5f2e41a31649faa12424cfc3a_cobalt-strike_icedid_satacom_stealc_vidar.exe
  • Size 32.3MB
  • Sample260803-dc7kcabk7x
  • SHA256 e354e065eb0fa3cf17461b8882c3eab42b84169fc4e0f0b5100ee8f621d2eee1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-03_2d1cefb5f2e41a31649faa12424cfc3a_cobalt-strike_icedid_satacom_stealc_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-03_2d1cefb5f2e41a31649faa12424cfc3a_cobalt-strike_icedid_satacom_stealc_vidar.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4068

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4068-0-0x00007FFA777DF000-0x00007FFA777E0000-memory.dmp

        memory/4068-1-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-2-0x00000241B29E0000-0x00000241B5A76000-memory.dmp

        memory/4068-3-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-4-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-5-0x0000024197940000-0x000002419A9D2000-memory.dmp

        memory/4068-8-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-12-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-6-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-10-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-7-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-13-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-16-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-18-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-19-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-22-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-25-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-23-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-28-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-29-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-31-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-33-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-35-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-37-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-39-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-41-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-43-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-45-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-47-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-49-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-51-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-53-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-55-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-57-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-59-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-61-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-63-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-65-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-67-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-69-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-75-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-71-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-73-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-76-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-78-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-80-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-82-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-84-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-86-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-88-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-90-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-92-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-97-0x00007FFA77650000-0x00007FFA77FF4000-memory.dmp

        memory/4068-94-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-96-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-99-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-101-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-103-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-105-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-107-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-109-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-111-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-113-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-115-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-117-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-119-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-121-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-123-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-125-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-127-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-129-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-131-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-133-0x0000024197940000-0x000002419A9CE000-memory.dmp

        memory/4068-135-0x0000024197940000-0x000002419A9CE000-memory.dmp