aef2f271aed7aacdf7218595b29fe6b104bdd37fb1bf78f8c64cae6af0ce9835

Analysis

max time kernel
149s
max time network
116s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/05/2026, 03:47

Target
2026-05-04_5c5eaf4933547c50c79d1cc7652e9b19_icedid_stealc.exe
Size 2.0MB
Sample260504-eb63vsfw5j
SHA256 aef2f271aed7aacdf7218595b29fe6b104bdd37fb1bf78f8c64cae6af0ce9835
MD5 5c5eaf4933547c50c79d1cc7652e9b19
SHA1 e2381ad50d1e18b0163eb3d8edeae765808463a5
SHA512 d51d5bb4bb53a2fe1fd5d9aeeb1f6e3f2c017be8d553c15da8925d93a238f561668b9c686e46bc97cda895d28b209b6547a3f70d4169f067921e90e6554f1175
SSDEEP 49152:GcXxTcBwCgyZwhTP+MMELGrXTcBwCgyZwhTP+MMELGS:GkclgyZw9g3rDclgyZw9g3
TLSH
T15EA50263E54241A8F59A8736CAD15D08A3F1781CE766974F33845E8AEFA33C07E79341
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ip-api.com

C:\Users\Admin\AppData\Local\Temp\2026-05-04_5c5eaf4933547c50c79d1cc7652e9b19_icedid_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-04_5c5eaf4933547c50c79d1cc7652e9b19_icedid_stealc.exe"
1⤵
PID:2084