4e3a6e430f992ffa571f1cf5c25d8ac8ef549e2bd4d16861965d953dac5190c6

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/08/2026, 18:23

Target
2026-08-27_498d1b74254c8baac4242bc3ca541add_glassworm_vidar.exe
Size 42.9MB
Sample260827-w1etcayvbv
SHA256 4e3a6e430f992ffa571f1cf5c25d8ac8ef549e2bd4d16861965d953dac5190c6
MD5 498d1b74254c8baac4242bc3ca541add
SHA1 6ecc8594be9fc2841a2dd6e3b1d0e248d9a9a4ab
SHA512 bb01c879987e5143b06238df6c89e4c35422fcd4c8111432c09e28316626af3ea131635c82da7c794e361e34580a98a8cb650efebb7b2562819360949dabc612
SSDEEP 393216:B+uxHPm+tAJ2VDwJLA68cKDKzNtZuDymsE5tNuoASPmIw3pVYpEYPy9Ga0OFiVtS:wftZzXrIq2b
TLSH
T119A78C5672A490E6E17BC179CA96C607FBB274601B319BCB40A0437B5F37AF15E7E220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	5920	2026-08-27_498d1b74254c8baac4242bc3ca541add_glassworm_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-27_498d1b74254c8baac4242bc3ca541add_glassworm_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-27_498d1b74254c8baac4242bc3ca541add_glassworm_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5920