5af33d46fc48367aff3202380318ded8f71f4d1e4efd7df5be9ecdf4ad0b9b4a

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 06:32

Target
2026-10-26_cd43647bb2cee1edba7c7eed9e75fa9c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
Size 223KB
Sample261027-hamjlsbz5m
SHA256 5af33d46fc48367aff3202380318ded8f71f4d1e4efd7df5be9ecdf4ad0b9b4a
MD5 cd43647bb2cee1edba7c7eed9e75fa9c
SHA1 f7fab77c121712e3c586594b29467b4dc281d033
SHA512 cc694d6d499e16339515ff9f6b23cfed1d8cd560886ecff2f680825908f4060e2aab4442059ee9c56d12885027a333661898897c739e2e0e438bd274d818fd0e
SSDEEP 6144:EdhAJ7ri9N7y+mazFUUyyIDpsWOsFJlCv:FrKW+mazFUzp1OsFL0
TLSH
T178248D16F3951CFAD567C539CA414902EF72BC8603A0DADF47A049A29F236E09F3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3564	2026-10-26_cd43647bb2cee1edba7c7eed9e75fa9c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_cd43647bb2cee1edba7c7eed9e75fa9c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_cd43647bb2cee1edba7c7eed9e75fa9c_cobalt-strike_icedid_luca-stealer_njrat_stealc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3564