2d70cee1912547ee09b16e05bcfa4957412a3fc9fb3a38a756d19bd1c910fab0

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/10/2026, 14:37

Target
2026-10-18_5296092483107d84dd3b077f6540a205_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Size 11.1MB
Sample261018-ry481aft7x
SHA256 2d70cee1912547ee09b16e05bcfa4957412a3fc9fb3a38a756d19bd1c910fab0
MD5 5296092483107d84dd3b077f6540a205
SHA1 c3c4ed17e6a73e85649c98faefde85e8dda840f8
SHA512 89687d10a52bcd92a87d0ec6803a3196c834968df5fc1e3b0c1797cdc6d101bc9fd01f3fd816dfbbb5401bb3ad36b1ccb1c409c9b4af5c6cc42610517c1e7e7b
SSDEEP 49152:Hj8+Npa5vjAOswxl95Zdmz/EKXRdZTqRqmdXQk0k2qOeEknQu7wjvvebZuSthBtD:D8+3WYbzTeEPo1hphN4vGuXxIw/SY3f0
TLSH
T1E5C6E506A7F951D8F5BBD674A977662AEE32BC618B3083CF1150560B0F32ED48E39721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4124	2026-10-18_5296092483107d84dd3b077f6540a205_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Token: SeIncBasePriorityPrivilege	4124	2026-10-18_5296092483107d84dd3b077f6540a205_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-18_5296092483107d84dd3b077f6540a205_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-18_5296092483107d84dd3b077f6540a205_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4124