0eaad5da4c0a6a06ec4ad91270a77329cf0d7294cda69344010e491698ba11ab

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 14:29

Target
2026-08-08_793764290843733d59b6e84bc52787a2_icedid_stealc_vidar.exe
Size 3.6MB
Sample260808-rtw2tsyclg
SHA256 0eaad5da4c0a6a06ec4ad91270a77329cf0d7294cda69344010e491698ba11ab
MD5 793764290843733d59b6e84bc52787a2
SHA1 e6671be518558d901878ffbdb123b25a8d3896ac
SHA512 11cf12e2583dcd7fc358083f3b46c1c7bea67c2862800c4a716a6c96fe4e02e47dbdaea8043a98fb272de3d4eb44e3374c98980af41c01a4c70496a8e8678aa0
SSDEEP 49152:lSgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytdNbYJ3:HHBSYlO60RzurFjrJYe2KHaw+yxq3
TLSH
T1F0061247A9A651EAE53AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5112	2026-08-08_793764290843733d59b6e84bc52787a2_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-08_793764290843733d59b6e84bc52787a2_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-08_793764290843733d59b6e84bc52787a2_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5112