113d3d21ae0c12cdfd126f5aed9a1e5ef007df7f759e6be76ad7af9cb5f589a5

Analysis

max time kernel
150s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 00:55

Target
2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 569KB
Sample260810-a94ceagm2t
SHA256 113d3d21ae0c12cdfd126f5aed9a1e5ef007df7f759e6be76ad7af9cb5f589a5
MD5 671c3b2be333380ec99b861df7897066
SHA1 abb571d62188bcac93c7b8da9137bca1b6ac3479
SHA512 a8634b99b806874ba4a1f41351198c3f8fe84902a6d5c703874037559dbf242e03e9cb22d145ecd44b7a30f6db55d8ae29e7729ddfced48343a20b172272ebfe
SSDEEP 12288:8IX/qLhkduvt+W2aC4TtNOyph0lhSMXliLJn:82qLhL2aCi3h0lhSMXlU
TLSH
T122C44B16E7B281E5D4BAC17885126626FE623C5DC334B79B47A48B571F237A0EB3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	2936	2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2936