8c960fbae9edfd2ca200048196cb7ae4941ff17e4f563a92d960362ac49436a2

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/09/2026, 23:26

Target
2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
Size 8.1MB
Sample260906-3e89dshr31
SHA256 8c960fbae9edfd2ca200048196cb7ae4941ff17e4f563a92d960362ac49436a2
MD5 8708f4e5ce605a4e261d8101097caa04
SHA1 803fb5d10712f3d9af7ad3e7bbd533b072ae8795
SHA512 dc530f5708fedb3beed5a25a0f63c93c6372d2e930b340cea8d4ff57a78c8411e8b6d2aeae660937ebe998d2ab7330bcc2dc5cb9282eb0fc91c9b80cb1b2213f
SSDEEP 196608:VA/UEnu6WLla0WkJ3SxNRRo/XPXyANBEsCNW5/KSskB1k:VWw6WLla0WkJ3SxNRRo/XPXyAvEsCNmO
TLSH
T12C869EAAA2BC00E9D4BBD1B8C6565527E7727415137457EF1AA0CAF60F23BE01E3B710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeBackupPrivilege	2344	2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
Token: SeDebugPrivilege	2344	2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
Token: SeSecurityPrivilege	2344	2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-06_8708f4e5ce605a4e261d8101097caa04_akira_cobalt-strike_coinminer_glassworm_icedid_luca-stea.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2344