e965f6fb3b9e2297c65774503842ed45c2556ff7a8edfdc36f61c5c3dc6e63ed

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 16:30

Target
2026-08-07_16aa72d6ba237106c4bfc3486e64b669_icedid_stealc_vidar.exe
Size 3.9MB
Sample260807-t1ahhsstdw
SHA256 e965f6fb3b9e2297c65774503842ed45c2556ff7a8edfdc36f61c5c3dc6e63ed
MD5 16aa72d6ba237106c4bfc3486e64b669
SHA1 6034adb16efb08b4138a6cc7b9d23f8c3efe254a
SHA512 be4d7667cc1f4f868db109e4307c3ff33bf12907fb930f852039bf47c978b317fd48f8006409e906c1dbc0b904c729fcd04c58b4a675964c31604a06361e45f9
SSDEEP 98304:WHBSYlO60RzurFjrJYe2KHaw+y9W/EQVJk:MCRqrxOeYqW/Eqk
TLSH
T189161247A9A651EAE439D03CC247452AF7B1389683A2D7CB934446972F733F84E3B384
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1920	2026-08-07_16aa72d6ba237106c4bfc3486e64b669_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_16aa72d6ba237106c4bfc3486e64b669_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_16aa72d6ba237106c4bfc3486e64b669_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1920