2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc

General

Target
2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc
Size 106.5MB
Sample260704-vdd3vsdz3p
SHA256 aa69041e8087b806432391abe2ef458b2bb3f5ca2092f42fef4cffeceb9497ca
MD5 f0ac2e0e05b4e797549f477661470dae
SHA1 a8438d854d88d32d8332c458411e2e61e753a5a5
SHA512 af529636093685270427ab388ba302964f77e2cb2d92d7fa385ea9a1b72a719584139aba44c073c58445099293afb89ae344336e1d8c39b8226a2463ed1a28ee
SSDEEP 1572864:GjG3FMgGvVIwkT3L7RmNoCay7OgG8ia1XzKCQW/tMxBV7YIIArmXPqSPtohzoFO:GIhEaCKF83zK+MxzDIEyCSihzrvBQ
TLSH
T1EB38337E13904EABDD4463326C34A5F8A6EFE1FBFDC47092C8EA8157C9B9AD01405768
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc

File Explorer

2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc

.exe 106.5MB

2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc

IMPHASH a2fb9614eff2227fc2831dd74ee6bca2
SHA256 aa69041e8087b806432391abe2ef458b2bb3f5ca2092f42fef4cffeceb9497ca
MD5 f0ac2e0e05b4e797549f477661470dae
SHA1 a8438d854d88d32d8332c458411e2e61e753a5a5
SHA512 af529636093685270427ab388ba302964f77e2cb2d92d7fa385ea9a1b72a719584139aba44c073c58445099293afb89ae344336e1d8c39b8226a2463ed1a28ee
SSDEEP 1572864:GjG3FMgGvVIwkT3L7RmNoCay7OgG8ia1XzKCQW/tMxBV7YIIArmXPqSPtohzoFO:GIhEaCKF83zK+MxzDIEyCSihzrvBQ
TLSH
T1EB38337E13904EABDD4463326C34A5F8A6EFE1FBFDC47092C8EA8157C9B9AD01405768
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle HeapReAlloc GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW CreateFileW WriteConsoleW GetModuleHandleW GetProcAddress GetCurrentProcessId CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable InitializeCriticalSectionEx GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetFileType SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA

user32

FillRect GetClientRect SetWindowTextW UpdateWindow GetSystemMetrics ShowWindow DestroyWindow LoadCursorW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW DispatchMessageW TranslateMessage GetMessageW CreateWindowExW

gdi32

SetBkMode DeleteObject CreateSolidBrush CreateFontW SetTextColor

comctl32

InitCommonControlsEx

Name

.text

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

106.3MB

Virtual Size

106.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_f0ac2e0e05b4e797549f477661470dae_icedid_stealc

kernel32

user32

gdi32

comctl32

generic