c8cd98a61b75e6cbdab27327e7604f3c3aead1b815401ab47fd1c7f0b8ad4aa3

Analysis

max time kernel
148s
max time network
147s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 08:30

Target
2026-09-10_fbb79ea300cd1bb34ef592ae8d778ce2_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Size 3.4MB
Sample260910-kej1dsttav
SHA256 c8cd98a61b75e6cbdab27327e7604f3c3aead1b815401ab47fd1c7f0b8ad4aa3
MD5 fbb79ea300cd1bb34ef592ae8d778ce2
SHA1 92255eb27b88cdf4aea3b64ce63caa6bb328383e
SHA512 88fbeba845b1bec92582f70723bb4ababb78730484f32c6bfdd84fe713de35fd9748c997e8723d9ef7dd5a3ed5b458bfca8676730efa58ccfd46b40c48d96fd7
SSDEEP 98304:1tbiAiSn02FwgDQhBg0t2J6euE1LAW+TGf6iYAKRs6WHqQitNYY:10Sn026uQhBg0sFibf
TLSH
T175F58C9AA3A800E8D9BBC17CC9578507E7F1B86943709BDB06B447790F23AD15E3EB14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3368	2026-09-10_fbb79ea300cd1bb34ef592ae8d778ce2_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
Token: SeLockMemoryPrivilege	3368	2026-09-10_fbb79ea300cd1bb34ef592ae8d778ce2_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-10_fbb79ea300cd1bb34ef592ae8d778ce2_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-10_fbb79ea300cd1bb34ef592ae8d778ce2_coinminer_glassworm_icedid_njrat_stealc_vidar_xmrig.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3368