8a39b63dadc63441c2ed4a435e6e628ceaf6ee1126b114f797252d7fb7fe74be

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/09/2026, 14:44

Target
2026-09-29_e55a64412aa5ef5208854a05aab4a2f8_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 356KB
Sample260929-r4btmstxes
SHA256 8a39b63dadc63441c2ed4a435e6e628ceaf6ee1126b114f797252d7fb7fe74be
MD5 e55a64412aa5ef5208854a05aab4a2f8
SHA1 38ff59607ea34e48047616c3667e412448a96c87
SHA512 40c767567ad8075136052e6acb97484060831db3d2c3f404d7bb7bb87f0ec374d1da3c65960990ce30aa7145ad4876a2bb2fc8cfe7bc7e7a47bd8cd9e6d6ed81
SSDEEP 6144:SczDlp9malLimFuZPyiIJvL6Fm/Rfohe4DW1cHii:Sctp9malLimEZkJueoBD3
TLSH
T1EB745A06A2E590F9E577C238C806CAB5E6767C05C7609BEF13E06E573F236909E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1872	2026-09-29_e55a64412aa5ef5208854a05aab4a2f8_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_e55a64412aa5ef5208854a05aab4a2f8_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_e55a64412aa5ef5208854a05aab4a2f8_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1872