Analysis
- max time kernel
149s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
- submitted
30/06/2026, 12:13
General
- Target 2026-06-29_1e4dcd6fd8615ebd4e79ab783fbbe1b3_icedid_stealc.exe
- Size 3.8MB
- Sample260630-pd81caev61
- SHA256 0501a586ad3e2205bdf0ef243fe9544eb7d1cb54ca735f0df46a361188e3d706
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Suspicious behavior: EnumeratesProcesses 13 IoCs
- Suspicious behavior: MapViewOfSection 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-29_1e4dcd6fd8615ebd4e79ab783fbbe1b3_icedid_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-29_1e4dcd6fd8615ebd4e79ab783fbbe1b3_icedid_stealc.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --isolated2⤵
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2464-0-0x00007FFC16FDF000-0x00007FFC16FE0000-memory.dmp
memory/2464-1-0x000001DB2D740000-0x000001DB2D76A000-memory.dmp
memory/2464-2-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-3-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-4-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-5-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-6-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-7-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-8-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-9-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-10-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-11-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-12-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-13-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-14-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-15-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-16-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp
memory/2464-17-0x00007FFC16E50000-0x00007FFC177F4000-memory.dmp