aa4efbf6dfc9a7cb12b0c91734543a8f184cf9e8ac81597762f5fd804b49c12e

Analysis

max time kernel
150s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 07:29

Target
2026-08-24_92384658fb508b2d4ce6a62f25c6415c_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
Size 917KB
Sample260825-jbee3atzgz
SHA256 aa4efbf6dfc9a7cb12b0c91734543a8f184cf9e8ac81597762f5fd804b49c12e
MD5 92384658fb508b2d4ce6a62f25c6415c
SHA1 e797f6ef8b4eda2707015eb45fbe124c200a34af
SHA512 6b9d35d963b23ec1e9db28b17cadbff2bcfbebd780c669abc498ff2293ffcce6d30a39774d6825bad2df88c71044012f3759d457e62f935c8c16ac914abc110c
SSDEEP 24576:/tIZPfhaaD8a7MRpSmqAhnMDaiGGC5SYCc:/tIZPZawtMR8/AhnCQZ
TLSH
T1CE15492DE6A801AAE06A9179EC554706E7B37F05137186CB33A0765A1F376E0CF3AF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5840	2026-08-24_92384658fb508b2d4ce6a62f25c6415c_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_92384658fb508b2d4ce6a62f25c6415c_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_92384658fb508b2d4ce6a62f25c6415c_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5840