6dc842f1071b16e32870ad65ae6cd2eeac7498e31ec9ad6b67a17d78f3e503a9

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 00:34

Target
2026-09-29_5817e37f05f0553f052fc38c16d8f59f_cobalt-strike_icedid_satacom_stealc_vidar.exe
Size 3.3MB
Sample260930-aw7snstdrf
SHA256 6dc842f1071b16e32870ad65ae6cd2eeac7498e31ec9ad6b67a17d78f3e503a9
MD5 5817e37f05f0553f052fc38c16d8f59f
SHA1 4f2cbfac380f2df2d2e3ed09ed528f9e4f4e3c85
SHA512 04856de110b4ac1d6723688dc50074512e8bd4c3eefc19af6b8874ea0ad3953c755960df9bd660d5aaff27afbf14633b1b3c71a275dadd276d6b13498b74efb6
SSDEEP 49152:XtxhdgQNOHBSYl1Vy6fl7uRcCuVYGF1tjre6x5Sd3VIr2KNV40Faw+ytX:XIHBSYlO60RzurFjrJYe2KHaw+y
TLSH
T1D9F51207AD95906FF93AE538C6934615D7F27C004782DADB8344C6F62EB32B45BAB390
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1008	2026-09-29_5817e37f05f0553f052fc38c16d8f59f_cobalt-strike_icedid_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-29_5817e37f05f0553f052fc38c16d8f59f_cobalt-strike_icedid_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-29_5817e37f05f0553f052fc38c16d8f59f_cobalt-strike_icedid_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1008