1145c85249d6a1a701c20bf35a8c72f1c07bd144ac43a5ec60bb07096adeae8f

Analysis

max time kernel
150s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 19:07

Target
2026-08-05_1e5f2e9f2d3da6913247aab3102dec8c_icedid_stealc_vidar.exe
Size 3.7MB
Sample260805-xsrcvaztev
SHA256 1145c85249d6a1a701c20bf35a8c72f1c07bd144ac43a5ec60bb07096adeae8f
MD5 1e5f2e9f2d3da6913247aab3102dec8c
SHA1 c5e4ebdd8b4d0c47256347dfdfbf16530476c0ce
SHA512 2c42aa79c55f184773b3c92ec6a3e7e28bbee03e75663402336e413a328518ad03467565ae3d3310ba29003607f342a739185c32e63b189749ee9411cb1af643
SSDEEP 49152:IigQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdM5Mo595I+:qHBSYlO60RzurFjrJYe2KHaw+yP65I+
TLSH
T16C061247A9A651EAE836D03CC247452AF7B1789583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1784	2026-08-05_1e5f2e9f2d3da6913247aab3102dec8c_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-05_1e5f2e9f2d3da6913247aab3102dec8c_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_1e5f2e9f2d3da6913247aab3102dec8c_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1784