727e8c839a0b5eb1d67282b7e323ecf51ac1b73ee0d81946abbbfce005f43210

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 10:43

Target
2026-08-15_b6f7049eaaae1b41779d68e3c7bc31b3_cobalt-strike_icedid.exe
Size 131KB
Sample260815-mshetsfc43
SHA256 727e8c839a0b5eb1d67282b7e323ecf51ac1b73ee0d81946abbbfce005f43210
MD5 b6f7049eaaae1b41779d68e3c7bc31b3
SHA1 2e776abca8445f2a3cc63066de167843497d6f3d
SHA512 8d6a349373cb229526b8d455ae31eb095bdabb6dfee6a1f7ba39f56ccabc8abdca3fead12d428d30ac39402ad10bdb974725d977e03fa7969bdc903535e6dd50
SSDEEP 3072:fEYvuYeweXlgl3ku3f+p9J6BFsK8DT+wOCwPnvUOC92e:M21eO3ku3WbJo/nvpx
TLSH
T151D36C57B3E530F8E1778579C4A1170AEB72B8721BA19BDF03A046651F232D09E3EB25
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeAssignPrimaryTokenPrivilege	5836	2026-08-15_b6f7049eaaae1b41779d68e3c7bc31b3_cobalt-strike_icedid.exe
Token: SeCreateGlobalPrivilege	5836	2026-08-15_b6f7049eaaae1b41779d68e3c7bc31b3_cobalt-strike_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_b6f7049eaaae1b41779d68e3c7bc31b3_cobalt-strike_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_b6f7049eaaae1b41779d68e3c7bc31b3_cobalt-strike_icedid.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5836