3e3b19a34ed77452d1d75634dfb1b237e6c894957cd8387c675e7503ba68de11

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 11:33

Target
2026-08-03_696f9043bd1fe24bc884ca4ccd987a33_akira_glassworm_icedid_rusty-stealer.exe
Size 6.3MB
Sample260804-nnvp2ayfmb
SHA256 3e3b19a34ed77452d1d75634dfb1b237e6c894957cd8387c675e7503ba68de11
MD5 696f9043bd1fe24bc884ca4ccd987a33
SHA1 164b556d5facda9660057dc6180ecbbd5b1d6288
SHA512 80693f7c54050e37aae5b6828cca75c64157fdf41ec4cd667bf719cd4ce7b4f7e163905dea248a162cfa910d17fd279e27b40a6596cf36c46bd31fd4b42a236d
SSDEEP 98304:TXROZU7NWW+8VtGwKlircVu/ntyG48Cs1jHqrOhFF44HosfQE:SsMVhsfQ
TLSH
T172662915BA5BA8EDC55AC870834A4A736E2170CB0B36B9FB41C486393F69AF05F3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 35	5048	2026-08-03_696f9043bd1fe24bc884ca4ccd987a33_akira_glassworm_icedid_rusty-stealer.exe
Token: 35	5048	2026-08-03_696f9043bd1fe24bc884ca4ccd987a33_akira_glassworm_icedid_rusty-stealer.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_696f9043bd1fe24bc884ca4ccd987a33_akira_glassworm_icedid_rusty-stealer.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_696f9043bd1fe24bc884ca4ccd987a33_akira_glassworm_icedid_rusty-stealer.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5048