f06cb4a70955a039b2112e4684a686028097f434b1e58ed5fe19057d2a551a3a

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 17:48

Target
2026-10-29_05cd423c6189563bd989421a33cb648a_glassworm_icedid_luca-stealer_njrat_ryuk.exe
Size 1.2MB
Sample261029-wdj5jsdv2v
SHA256 f06cb4a70955a039b2112e4684a686028097f434b1e58ed5fe19057d2a551a3a
MD5 05cd423c6189563bd989421a33cb648a
SHA1 11e8b80144741b21946249f340c35c6175fbba44
SHA512 95aa9bde1f70dd655ef4a0e4e92600aae111fe092afff0b2fe912c88676733a7f5d20ee508294b8170e14f6f49b66795b32f1f88b28e45067c0f109216967ba0
SSDEEP 24576:9VZR3/EP60qvH2i06Ly49JY8ez04nuOC:NR3/EP60PJVgYDLnu
TLSH
T1E1454B83F2B251ECC516C079536AA137FA36B88D46307EBB57D48B702F62F905A2CB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4148	2026-10-29_05cd423c6189563bd989421a33cb648a_glassworm_icedid_luca-stealer_njrat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-29_05cd423c6189563bd989421a33cb648a_glassworm_icedid_luca-stealer_njrat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-29_05cd423c6189563bd989421a33cb648a_glassworm_icedid_luca-stealer_njrat_ryuk.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4148