306bf5f85c6760ac35662b18215a5ba20a735b5968d7523647a0b358d127800e

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 22:24

Target
2026-10-08_01941f7a46fd990d093b89886f881c5e_glassworm_icedid_luca-stealer_njrat_ryuk.exe
Size 1.8MB
Sample261009-2bs8bswz4p
SHA256 306bf5f85c6760ac35662b18215a5ba20a735b5968d7523647a0b358d127800e
MD5 01941f7a46fd990d093b89886f881c5e
SHA1 c0e78be3671a22c451b7948e596bfa3c71066082
SHA512 14f3d64cd720d8973c4efb56990260e94f3281b1b5b25a79dc13fd4939750a4c07696932cf889b001bb3c1a24f06ed35af84dd77671332416a2572b7e0088938
SSDEEP 12288:bWZ8oOk3KtRvDcioAWnTGRsMtn/H39Jt3g5SztkWUZx2bewPcIjIfwMv1c4cSeR:bWZ8oOk3cBMTMsw/Hn0WUSXIfw0Z
TLSH
T119956303A735D1E8C5BAD83DD626A663FA603C4DC13877368F915E522F28B60F62D724
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	1560	2026-10-08_01941f7a46fd990d093b89886f881c5e_glassworm_icedid_luca-stealer_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-08_01941f7a46fd990d093b89886f881c5e_glassworm_icedid_luca-stealer_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-08_01941f7a46fd990d093b89886f881c5e_glassworm_icedid_luca-stealer_njrat_ryuk.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1560