f447d3d579ac971da548ad7a11955f194a28ad5aed78a11e2607f90bcf95d348

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 08:29

Target
2026-08-09_0fca46c6fc5dc4574fdfeb5d1fde230f_cobalt-strike_icedid_njrat.exe
Size 417KB
Sample260809-kd4cmsxvht
SHA256 f447d3d579ac971da548ad7a11955f194a28ad5aed78a11e2607f90bcf95d348
MD5 0fca46c6fc5dc4574fdfeb5d1fde230f
SHA1 9b30e3a9d81b11fc73f916bd67d51053a9b983a0
SHA512 cde071a6d48ac9e1a7246152fcee9ead978d23ba424ae0587b2581e25e0433cb8640d43c3e76b2cfd4a1fc9fec9010891448c4e42b4b18f503fbdb312443a25a
SSDEEP 6144:xKuUF+aAJnztlAv1OWP7OAIJzLtN6FW+BM5BRanDBgqE2phkQKpL9vZWsFo5:xKu1ND8OUylLtk57/bKd9BRFQ
TLSH
T13694AE16E3E524E5E8A7C139C852C916F7B1BC550730DBAF12B46A582F333919D3EB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemEnvironmentPrivilege	4392	2026-08-09_0fca46c6fc5dc4574fdfeb5d1fde230f_cobalt-strike_icedid_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-09_0fca46c6fc5dc4574fdfeb5d1fde230f_cobalt-strike_icedid_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-09_0fca46c6fc5dc4574fdfeb5d1fde230f_cobalt-strike_icedid_njrat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4392