90bd7f1798fce9e459bf90813626c6baa62440b0170714eece1d27b81e4528b3

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/09/2026, 18:54

Target
2026-09-23_afb2a8379f7969108c46c122a442caf4_icedid_stealc.exe
Size 3.9MB
Sample260923-xkd3jsaa68
SHA256 90bd7f1798fce9e459bf90813626c6baa62440b0170714eece1d27b81e4528b3
MD5 afb2a8379f7969108c46c122a442caf4
SHA1 0b9406a5d5e8c21431153d90d98c695e1d1f9c7c
SHA512 21b8e1cef531ac2404fdd94ad2fbbaa8b9dfedc20d6d3db9dccb7477461b25660ed47ee63bed1f9b8ee51a283fcab5baa68b27dc00a116871d7a3d34a48f39e3
SSDEEP 98304:tJHBSYlO60RzurFjrJYe2KHaw+y0MB29XQDwM:tjCRqrxOeYQOgDD
TLSH
T1C516025BE95D90DAE436D03CD292412AF6A13C984362D7EB838447572F733F4BA3AB41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4852	2026-09-23_afb2a8379f7969108c46c122a442caf4_icedid_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-23_afb2a8379f7969108c46c122a442caf4_icedid_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-23_afb2a8379f7969108c46c122a442caf4_icedid_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4852