cbe562a657ed369f94e962b1186589c3cc93e76dd49208e1ca83306d8c0e6b20

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 07:51

Target
2026-08-05_542bd836c00e123fe5468ac9ffee3f11_cobalt-strike_glassworm_icedid_njrat_qakbot_satacom_stealc.exe
Size 10.8MB
Sample260805-jp8k3axyev
SHA256 cbe562a657ed369f94e962b1186589c3cc93e76dd49208e1ca83306d8c0e6b20
MD5 542bd836c00e123fe5468ac9ffee3f11
SHA1 47a4e7fdc0ac6f9f2b1b989ac74206b8dc1d85c2
SHA512 6d996c3d1cb18ea9b4d3bfd9d000dcd370a961c7ee59f59c8fdb37bf868a282ca7d4e7ce7bfbec228690bb5300fa266c5e3e02da46ea1cf97201757b2eb1d7a5
SSDEEP 49152:BjxUhZYR8VGoTTPIsPBYYKz7w/3X6NMZt49AmXD7ebMc4LSW3VdpNMnTaAoZLbHR:BjxXAP58MNAVLNMn/i0zkbW0rLlw6C
TLSH
T1FEB68C19B661C0E9C56A8274CD9BCA4AEB71BC440F2247DB32E1337E5E373D42E7A611
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4988	2026-08-05_542bd836c00e123fe5468ac9ffee3f11_cobalt-strike_glassworm_icedid_njrat_qakbot_satacom_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-05_542bd836c00e123fe5468ac9ffee3f11_cobalt-strike_glassworm_icedid_njrat_qakbot_satacom_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_542bd836c00e123fe5468ac9ffee3f11_cobalt-strike_glassworm_icedid_njrat_qakbot_satacom_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4988