2026-06-04_a8d825ca88714362bd317b338b227900_icedid

Resubmissions

04/06/2026, 17:07

260604-vm58psbs6z7

04/06/2026, 16:09

260604-tl3kraaw5y7

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-04_a8d825ca88714362bd317b338b227900_icedid
Size 2.1MB
Sample260604-vm58psbs6z
SHA256 896e5bd9fe339a5cb99b96f758debdfac1c63a8886a6f52897f2eca285a79990
MD5 a8d825ca88714362bd317b338b227900
SHA1 6e436b43b8ae1232c74ff58498c20c35ea672580
SHA512 304e32bcfda3e17628752d7d67c924033a91926a699d92742cc60be322f81eab6e2430fea04e5dac6bc58e6c26b8a365e18b6f1d6e720b98ab22b2898c5f1d4b
SSDEEP 49152:EQKi/v0G+NEGJ/7HslbU/BybKFgb565CqT8M2xz:Ai/a2Bp
TLSH
T1AFA59D0B72A882F4D077927DC9D68A8AE6F138454F2197DF01A85B5D2F33BE5493E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-04_a8d825ca88714362bd317b338b227900_icedid

File Explorer

2026-06-04_a8d825ca88714362bd317b338b227900_icedid

.exe 2.1MB

2026-06-04_a8d825ca88714362bd317b338b227900_icedid

IMPHASH 3071a2e99c07aae641becd71f3cad7b7
SHA256 896e5bd9fe339a5cb99b96f758debdfac1c63a8886a6f52897f2eca285a79990
MD5 a8d825ca88714362bd317b338b227900
SHA1 6e436b43b8ae1232c74ff58498c20c35ea672580
SHA512 304e32bcfda3e17628752d7d67c924033a91926a699d92742cc60be322f81eab6e2430fea04e5dac6bc58e6c26b8a365e18b6f1d6e720b98ab22b2898c5f1d4b
SSDEEP 49152:EQKi/v0G+NEGJ/7HslbU/BybKFgb565CqT8M2xz:Ai/a2Bp
TLSH
T1AFA59D0B72A882F4D077927DC9D68A8AE6F138454F2197DF01A85B5D2F33BE5493E321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

849324

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\miflash\xiaoxiang\MiFlash20160330\MiFlash\Build\obj\MiFlash\Release\MiFlash.pdb

mscoree

CorBindToRuntimeEx

setupapi

CM_Locate_DevNodeW CM_Reenumerate_DevNode SetupUninstallOEMInfW SetupCopyOEMInfW

userenv

GetUserProfileDirectoryW

kernel32

GlobalUnlock GlobalLock GlobalFree GlobalHandle CreateEventW GetDateFormatW GetTimeFormatW GetLocaleInfoW GetCommandLineW GetProcessId LocalFree CreateFileW WriteFile CreateMutexW ReleaseMutex FreeResource WideCharToMultiByte GetFullPathNameW FindFirstFileW GetEnvironmentVariableW FormatMessageW GetSystemDirectoryW GetCurrentDirectoryW GetWindowsDirectoryW GetComputerNameW OpenProcess CreateProcessW DuplicateHandle CreatePipe ReadFile PeekNamedPipe SetFilePointer MapViewOfFileEx CreateFileMappingW GetFileSize UnmapViewOfFile SetCommTimeouts DeviceIoControl PurgeComm Module32NextW Module32FirstW CreateToolhelp32Snapshot Thread32Next ResumeThread GetThreadContext SuspendThread OpenThread Thread32First Process32NextW Process32FirstW GetCPInfo LCMapStringW lstrcmpW GetFileType SetStdHandle GetSystemTimeAsFileTime CreateThread ExitThread RtlUnwindEx RtlLookupFunctionEntry RtlPcToFileHeader DecodePointer EncodePointer InitializeCriticalSection GetStringTypeW HeapSize HeapReAlloc HeapDestroy InterlockedPopEntrySList VirtualAlloc VirtualFree GetProcessHeap HeapAlloc HeapFree InterlockedPushEntrySList LoadLibraryA LocalAlloc IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext FlsGetValue SetLastError LoadLibraryW MulDiv FindClose FindNextFileW GlobalAlloc FlsSetValue FlsFree GetCurrentThread FlsAlloc SetHandleCount GetStdHandle ExitProcess GetACP GetOEMCP IsValidCodePage FatalAppExitA GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler GetTimeZoneInformation WriteConsoleW SetEvent CopyFileW DeleteFileW LoadLibraryExW FreeLibrary GetFileAttributesExW GetModuleFileNameW FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetVersion GetExitCodeProcess TerminateProcess Sleep WaitForSingleObject TerminateThread GetTickCount lstrlenA MultiByteToWideChar ReleaseSemaphore CreateSemaphoreW CloseHandle UnhandledExceptionFilter DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError lstrcpyW lstrcmpiW GetCurrentThreadId GetCurrentProcess FlushInstructionCache GetVersionExW lstrlenW GetModuleHandleW GetProcAddress LeaveCriticalSection EnterCriticalSection RaiseException CreateFileA SetEndOfFile GetDateFormatA GetTimeFormatA CompareStringW HeapSetInformation HeapCreate SetEnvironmentVariableA GetStartupInfoW SetUnhandledExceptionFilter

user32

GetDesktopWindow BeginPaint EndPaint GetWindowLongPtrW DestroyAcceleratorTable GetFocus CreateAcceleratorTableW PtInRect RegisterClipboardFormatW OffsetRect GetScrollPos CallWindowProcW FillRect ReleaseCapture GetClassNameW IsChild SetCapture InvalidateRgn ScreenToClient ClientToScreen GetSysColor RegisterClassExW GetAsyncKeyState LoadStringW ReleaseDC GetDC DefWindowProcW SystemParametersInfoW LoadAcceleratorsW InflateRect PostQuitMessage SetCursor EqualRect LoadCursorW GetClassInfoExW SetWindowLongW DrawFrameControl GetMessagePos DrawStateW DrawFocusRect DestroyMenu InsertMenuW LoadMenuW MonitorFromPoint GetSysColorBrush TrackPopupMenu GetSubMenu SetMenuDefaultItem UnregisterClassA IntersectRect SetScrollPos GetScrollInfo GetComboBoxInfo MapDialogRect SendDlgItemMessageW SetWindowContextHelpId RegisterWindowMessageW DialogBoxIndirectParamW DestroyCursor CopyRect PostThreadMessageW DispatchMessageW TranslateMessage GetMessageW PeekMessageW FrameRect DrawTextW GetSystemMetrics GetDlgCtrlID IsWindow SetWindowRgn IsDialogMessageW SetScrollInfo KillTimer SetTimer CreateDialogIndirectParamW GetKeyState GetWindowThreadProcessId RedrawWindow IsWindowVisible ShowWindow InvalidateRect MessageBoxW MoveWindow PostMessageW CreateWindowExW TranslateAcceleratorW DestroyWindow CharNextW GetActiveWindow wsprintfW SetWindowLongPtrW MessageBeep SetFocus GetParent GetWindow GetWindowRect MonitorFromWindow GetMonitorInfoW GetClientRect MapWindowPoints SetWindowPos GetDlgItem SetDlgItemTextW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetWindowLongW SendMessageW EndDialog EnumWindows ExitWindowsEx FindWindowW LoadImageW SetForegroundWindow GetCapture IsRectEmpty

gdi32

GetClipBox LineTo OffsetWindowOrgEx CreatePen SetWindowOrgEx SetViewportOrgEx ExtTextOutW RoundRect SetTextColor SetBkMode SetBkColor RestoreDC SaveDC GetStockObject GetObjectW GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap DeleteDC CreateSolidBrush CombineRgn CreatePolygonRgn CreateRectRgn DeleteObject CreateFontIndirectW MoveToEx SelectObject GetTextExtentPoint32W

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegDeleteValueW RegCloseKey RegQueryValueExW GetTokenInformation GetLengthSid CopySid LookupPrivilegeValueW RegOpenKeyExW OpenProcessToken RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW RegSetValueExW

shell32

ShellExecuteW SHBrowseForFolderW DragFinish DragQueryPoint DragQueryFileW SHGetPathFromIDListW

ole32

CoSuspendClassObjects CoRegisterClassObject CoRevokeClassObject RegisterDragDrop OleUninitialize OleInitialize OleDuplicateData ReleaseStgMedium RevokeDragDrop CLSIDFromString CLSIDFromProgID CoGetClassObject OleLockRunning StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoInitializeEx CoUninitialize CoCreateInstance CoCreateFreeThreadedMarshaler DoDragDrop CoResumeClassObjects CreateStreamOnHGlobal

oleaut32

SysAllocStringLen SysAllocString VariantCopy VariantClear VariantInit LoadRegTypeLi VariantChangeType DispCallFunc VarCmp SysFreeString OleCreateFontIndirect VarUI4FromStr RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysStringLen

shlwapi

PathIsDirectoryW SHRegSetUSValueW PathFindFileNameW StrStrIW SHRegGetBoolUSValueW PathAppendW SHAutoComplete PathFileExistsW StrStrA PathIsRelativeW SHCreateStreamOnFileW ord12 StrToIntW StrCmpIW PathRemoveFileSpecW

comctl32

ImageList_LoadImageW InitCommonControlsEx _TrackMouseEvent ImageList_GetIconSize ImageList_DrawEx

msimg32

AlphaBlend GradientFill

uxtheme

CloseThemeData OpenThemeData DrawThemeBackground

psapi

GetProcessImageFileNameW

Name

.text

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

316KB

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

576KB

Virtual Size

580KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-04_a8d825ca88714362bd317b338b227900_icedid

mscoree

setupapi

userenv

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

uxtheme

psapi

generic