a6036652f496faaf85fc8a98ea683abeda5bbc48bca677bf53ab130b912fe19f

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/10/2026, 17:04

Target
2026-10-08_3992de39351a632cc13ac1236f180b09_glassworm_icedid_luca-stealer_njrat_ryuk.exe
Size 1.2MB
Sample261009-vk8aaa1vcs
SHA256 a6036652f496faaf85fc8a98ea683abeda5bbc48bca677bf53ab130b912fe19f
MD5 3992de39351a632cc13ac1236f180b09
SHA1 d0874f54ba3f20d142ad7666d094774a7c2fac75
SHA512 debae6dfc79e59fed342740980b2aec88ada2de338fae5918157be86c3dfae968add379ccd30a8b1da4551bc9aaa94f54430387ed7f2f61b5d2536b41b05adf9
SSDEEP 24576:eIy7aZWtFdJ39dE5AA+g/RXI95PWD/UUcKG+G+M:e57aZWtFdJ39dEEC49xOINB+
TLSH
T160454B87F2A250ECC556C179436AA133FA36B88D42347EBB53D4C7702F66FA05A2CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	5504	2026-10-08_3992de39351a632cc13ac1236f180b09_glassworm_icedid_luca-stealer_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-08_3992de39351a632cc13ac1236f180b09_glassworm_icedid_luca-stealer_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-08_3992de39351a632cc13ac1236f180b09_glassworm_icedid_luca-stealer_njrat_ryuk.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5504