f11da8537b5b56fff6ff43609d167731027f29261c0d7dcf9706c4333d8be00e

Analysis

max time kernel
150s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 17:42

Target
2026-08-05_af3c6983c3705c7c970df68e00d3a198_icedid_stealc_vidar.exe
Size 3.5MB
Sample260805-wae2esch47
SHA256 f11da8537b5b56fff6ff43609d167731027f29261c0d7dcf9706c4333d8be00e
MD5 af3c6983c3705c7c970df68e00d3a198
SHA1 b65dff75e67dd28d83998677e69f3037de6b7a68
SHA512 2cf3e2cb21458e28ff48b75eb80fbe773ebe69d5851f8241fa447ab520d190d856cbd01609c494ee14cf9be93c46a279efb1a72d43dfe9da76ed52b83d32f91a
SSDEEP 49152:CigQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdqT6Np1:kHBSYlO60RzurFjrJYe2KHaw+yHX1
TLSH
T10D061247E9A651EAE53AD03CC247452AF6B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4280	2026-08-05_af3c6983c3705c7c970df68e00d3a198_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-05_af3c6983c3705c7c970df68e00d3a198_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_af3c6983c3705c7c970df68e00d3a198_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4280