8d70b60935a54718bccf029b6df6b92909ed44b219e0dbaa85cf7280d546b403

Analysis

max time kernel
148s
max time network
132s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 06:14

Target
2026-08-05_1328e24792daa2de6791c628aa1b69e0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Size 543KB
Sample260805-gzedvszelg
SHA256 8d70b60935a54718bccf029b6df6b92909ed44b219e0dbaa85cf7280d546b403
MD5 1328e24792daa2de6791c628aa1b69e0
SHA1 70d3873c0387ed8c7c3a71cfc65e5d80b489b654
SHA512 ace6c6a29fdb543da127e4859042f9e3d920c521d05d5816ee188415bcce1700defb07d613e7b9c7e2dc1e2c61754d22ae762e8a438f1f662121be43f49d21f0
SSDEEP 12288:jXeJarz0FTGcjrKgGsyPEB1kzHwAsxmt:uscjrKg9d1kzsxmt
TLSH
T1AEC46C95B2A407F9D17BC1B48E934906E7727C4A07619BEB07E08AB61F27AD15F3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1184	2026-08-05_1328e24792daa2de6791c628aa1b69e0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-05_1328e24792daa2de6791c628aa1b69e0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_1328e24792daa2de6791c628aa1b69e0_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1184