General
- Target 2026-06-04_1ca4c9b85ea831f7b4ea937f29ca147c_icedid_vidar
- Size 16.6MB
- Sample260604-rxstkshv4k
- SHA256 7339d428ad8197bc73d0040ebe7b7cb3f234d4cae247dea4e7314a9b4ede3a5c
- MD5 1ca4c9b85ea831f7b4ea937f29ca147c
- SHA1 c87d65321867cc17d0aec485e6f06a769f04fdb1
- SHA512 94e672d0e2f153052f4c89971f50c30a11f539d9212588ac62176df705daf064418dbdd42e705f5ed1910b41118a40babb60d3dc57f9a848489732f8bbb6894e
- SSDEEP 196608:yBM6p/cY3zeS+YxWeBX+bzyzv6GEc3i1dapn2Sz1xWeBX+bzyzG6xMGrg8tbK:yBhbzOQpvvYXSnL7pvGgMGrg8JK
- TLSH T12107F1D625D461BDC4A2C630E39657FAF0D9B8580DB9941FBFC618012A31DC9ECB6B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-04_1ca4c9b85ea831f7b4ea937f29ca147c_icedid_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_1ca4c9b85ea831f7b4ea937f29ca147c_icedid_vidar.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_1ca4c9b85ea831f7b4ea937f29ca147c_icedid_vidar
- Size 16.6MB
- SHA256 7339d428ad8197bc73d0040ebe7b7cb3f234d4cae247dea4e7314a9b4ede3a5c
- MD5 1ca4c9b85ea831f7b4ea937f29ca147c
- SHA1 c87d65321867cc17d0aec485e6f06a769f04fdb1
- SHA512 94e672d0e2f153052f4c89971f50c30a11f539d9212588ac62176df705daf064418dbdd42e705f5ed1910b41118a40babb60d3dc57f9a848489732f8bbb6894e
- SSDEEP 196608:yBM6p/cY3zeS+YxWeBX+bzyzv6GEc3i1dapn2Sz1xWeBX+bzyzG6xMGrg8tbK:yBhbzOQpvvYXSnL7pvGgMGrg8JK
- TLSH T12107F1D625D461BDC4A2C630E39657FAF0D9B8580DB9941FBFC618012A31DC9ECB6B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
Deletes itself
Executes dropped EXE
Drops file in System32 directory
Suspicious use of NtSetInformationThreadHideFromDebugger