0efa0e6832d1d43f581d2be7160e59242eaed60e3901ae04ec40c494c5360332

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 12:10

Target
2026-10-26_8d5ba9730aff693a6712c8ae7d654468_glassworm_icedid_luca-stealer_njrat.exe
Size 2.8MB
Sample261027-pb8a2a1w2j
SHA256 0efa0e6832d1d43f581d2be7160e59242eaed60e3901ae04ec40c494c5360332
MD5 8d5ba9730aff693a6712c8ae7d654468
SHA1 f4888605de07eff2f7d230ccdb23263b4166ae80
SHA512 bea275248d23470aaf11f42134dd1ee459117385b881bd1d514a692783eb724a9dec465390a40bdcef6d21034d6de398ac18057f86d182708b4646126fa2fec5
SSDEEP 24576:zUc4hkxrWEx2nVg+TFkN4nikO89kKs7CcZYKBgF1VpgYJStI99gc:zUczKw0qcJO89kNZY9zgYYt69
TLSH
T118D563039B7180A8C6A6C63C99236237E6757C4EC339A377DB9A5B232B50790D73D790
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	5808	2026-10-26_8d5ba9730aff693a6712c8ae7d654468_glassworm_icedid_luca-stealer_njrat.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-26_8d5ba9730aff693a6712c8ae7d654468_glassworm_icedid_luca-stealer_njrat.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-26_8d5ba9730aff693a6712c8ae7d654468_glassworm_icedid_luca-stealer_njrat.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5808