2d9c83ea1015d9cbbc539f3faf0b2e3ae56af6a0861a8bd353e8da8e13a04981

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/08/2026, 08:23

Target
2026-08-12_e7af855619160a9c82021fd2dd16dafe_akira_icedid_mespinoza_njrat_ryuk.exe
Size 1.1MB
Sample260812-kaly7ascrd
SHA256 2d9c83ea1015d9cbbc539f3faf0b2e3ae56af6a0861a8bd353e8da8e13a04981
MD5 e7af855619160a9c82021fd2dd16dafe
SHA1 221ee58836dc02f95b71943022bb3ea673b49a12
SHA512 640768965bc147b38c868902f2bad0e757c5644149a48057b15d921d9a0ff98ea33f34390b5c7540c245f637ae099f5c23a9aa17ae2d94851637d4f4552ee9e9
SSDEEP 24576:5PWjI9+x1NBAlbM+t6MxdHguaCnAGGGC5SYCE:5PW7/Klbd6EhgNCOZ
TLSH
T111354B1DEA5840E6E06A8175DDA18646E3B37F56073197CB32A5721A3F335E0CE3AF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1360	2026-08-12_e7af855619160a9c82021fd2dd16dafe_akira_icedid_mespinoza_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-12_e7af855619160a9c82021fd2dd16dafe_akira_icedid_mespinoza_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-12_e7af855619160a9c82021fd2dd16dafe_akira_icedid_mespinoza_njrat_ryuk.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1360