4adbd6dbf0db001ca8d7130a07194765d71f4a8c6a6e8f5a629fdb7e860d5cff

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 11:35

Target
2026-08-30_4f0c9ae7ff3ebc9c92ebefbffd62bb53_icedid_stealc_vidar.exe
Size 3.5MB
Sample260831-np8naa1blh
SHA256 4adbd6dbf0db001ca8d7130a07194765d71f4a8c6a6e8f5a629fdb7e860d5cff
MD5 4f0c9ae7ff3ebc9c92ebefbffd62bb53
SHA1 c5397c403b8d19dcc6ec0641f91739f9e5d7d172
SHA512 d25b942f37e4e323a8393b5393e1671997428ca8563ee4042ceec400795446e4f5cb444fb33abcf4ba2f00842ce5d82a02df8ee20b0bd294a18b32a2136f090e
SSDEEP 49152:54gQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytddAY:1HBSYlO60RzurFjrJYe2KHaw+yWY
TLSH
T188F51247A9A651EAE53AD03CC247452AF7B1389583A2D7CB834446972F733F84E3B784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2844	2026-08-30_4f0c9ae7ff3ebc9c92ebefbffd62bb53_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-30_4f0c9ae7ff3ebc9c92ebefbffd62bb53_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-30_4f0c9ae7ff3ebc9c92ebefbffd62bb53_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2844