General
- Target 2026-06-28_a2df8f254766a7135ae6d2797b7625ca_icedid_stealc
- Size 1.6MB
- Sample260628-yxbcvsdz5k
- SHA256 fb18846e32a37f1b7003b8241c7719ac664d9ad739e75d362018e71d2579ea2f
- MD5 a2df8f254766a7135ae6d2797b7625ca
- SHA1 2fb89f74d4be5c633615f696cfa0ee9a0cd58a20
- SHA512 716a8168fcd295c17463f201863b251a4e85b61c164479e0931802aec1a47eb4a9520e014a2d7397c8adb7541946c2d13904a9153d9f74ea313aab3d3be2049d
- SSDEEP 12288:KWrzMQRgCMiWoOv+SvY4tdf5us+rX6dwU5MqE5lxgD5Es/DOgoovX2CzSIi7rolZ:BSXoOvZtj+rhU5M+p/DNPL1i74TZQ5E
- TLSH T1B275F62E6DC27366C9C1407FE36241724EFCB2591722D0A6EC68720C69EA1EC7677F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_a2df8f254766a7135ae6d2797b7625ca_icedid_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_a2df8f254766a7135ae6d2797b7625ca_icedid_stealc.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_a2df8f254766a7135ae6d2797b7625ca_icedid_stealc
- Size 1.6MB
- SHA256 fb18846e32a37f1b7003b8241c7719ac664d9ad739e75d362018e71d2579ea2f
- MD5 a2df8f254766a7135ae6d2797b7625ca
- SHA1 2fb89f74d4be5c633615f696cfa0ee9a0cd58a20
- SHA512 716a8168fcd295c17463f201863b251a4e85b61c164479e0931802aec1a47eb4a9520e014a2d7397c8adb7541946c2d13904a9153d9f74ea313aab3d3be2049d
- SSDEEP 12288:KWrzMQRgCMiWoOv+SvY4tdf5us+rX6dwU5MqE5lxgD5Es/DOgoovX2CzSIi7rolZ:BSXoOvZtj+rhU5M+p/DNPL1i74TZQ5E
- TLSH T1B275F62E6DC27366C9C1407FE36241724EFCB2591722D0A6EC68720C69EA1EC7677F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger