General
- Target 2026-06-27_0829273860f7ca0ae9498f8e4964e5fd_icedid_stealc
- Size 3.8MB
- Sample260629-md7feacy4l
- SHA256 1e8cf034f1bbb937055d846b94dc054ef4f770c83bdfacee664c3a8d8b71d8ca
- MD5 0829273860f7ca0ae9498f8e4964e5fd
- SHA1 fa1dbef5b1b1ea2e9adce3b90cd0309f77bc1906
- SHA512 73574ce905fb5e91bf7dd57895c361d5c151dd9032986c79a27c2016521a7c0afe1330ba414dff53a8f4e46c7bf1c3449ec802942f47020eef92e1d0c4d8ffc2
- SSDEEP 49152:KaeJEcpaH4bXWIBDG4zAeL/d9rHPZdL8abtqJZz7YqdiOYu/2Ymlxg3y7hifJSP+:F
- TLSH T128060933694D22CFD492053AE412A0F298BEE836A71F53E1D88B913D39E90D9951FF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_0829273860f7ca0ae9498f8e4964e5fd_icedid_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_0829273860f7ca0ae9498f8e4964e5fd_icedid_stealc.exe
Resource
win11ltsc2024-20260617-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_0829273860f7ca0ae9498f8e4964e5fd_icedid_stealc
- Size 3.8MB
- SHA256 1e8cf034f1bbb937055d846b94dc054ef4f770c83bdfacee664c3a8d8b71d8ca
- MD5 0829273860f7ca0ae9498f8e4964e5fd
- SHA1 fa1dbef5b1b1ea2e9adce3b90cd0309f77bc1906
- SHA512 73574ce905fb5e91bf7dd57895c361d5c151dd9032986c79a27c2016521a7c0afe1330ba414dff53a8f4e46c7bf1c3449ec802942f47020eef92e1d0c4d8ffc2
- SSDEEP 49152:KaeJEcpaH4bXWIBDG4zAeL/d9rHPZdL8abtqJZz7YqdiOYu/2Ymlxg3y7hifJSP+:F
- TLSH T128060933694D22CFD492053AE412A0F298BEE836A71F53E1D88B913D39E90D9951FF74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.