d028bdbbe25721254fcaaad4524a93331de604973cab5a1968915c122639d4da | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-05...ar.exe

windows10-2004-x64

7

2026-07-05...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_19633c21fcb1bf4bc425ac927da79685_icedid_vidar
Size 689KB
Sample260705-caal6agv2y
SHA256 d028bdbbe25721254fcaaad4524a93331de604973cab5a1968915c122639d4da
MD5 19633c21fcb1bf4bc425ac927da79685
SHA1 f7ac2e25605c22e454d466441d1c08b6d8dbeb7f
SHA512 0828c3b57f677646629bbd0af77e1a37f06a05e0d8952151426524ebb4eefa172c8b4b61f9f137986aefc365fd257450449fd28ec16cb17f04dfad1580997aa9
SSDEEP 12288:+C/2fAZ4ICuXUXIJBAXePGBrMl8OyZD3Wrwg40AQoDmAQlyrrCjpWYsJ63XPIYbs:DOICgpB5GBrMVyJWrwgh5AQorrYWbJ6K
TLSH
T1E5E41247A2A5B4FCF55BE03C84714D49EB32B8751A70CB5F67240A9A0F277C09E2AB71
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-05_19633c21fcb1bf4bc425ac927da79685_icedid_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

8 signatures

150 seconds

spyware stealer

Behavioral task

behavioral2

Sample

2026-07-05_19633c21fcb1bf4bc425ac927da79685_icedid_vidar.exe

Resource

win11ltsc2024-20260629-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

discovery spyware stealer

Malware Config

Targets

- Target
  2026-07-05_19633c21fcb1bf4bc425ac927da79685_icedid_vidar
- Size 689KB
- SHA256 d028bdbbe25721254fcaaad4524a93331de604973cab5a1968915c122639d4da
- MD5 19633c21fcb1bf4bc425ac927da79685
- SHA1 f7ac2e25605c22e454d466441d1c08b6d8dbeb7f
- SHA512 0828c3b57f677646629bbd0af77e1a37f06a05e0d8952151426524ebb4eefa172c8b4b61f9f137986aefc365fd257450449fd28ec16cb17f04dfad1580997aa9
- SSDEEP 12288:+C/2fAZ4ICuXUXIJBAXePGBrMl8OyZD3Wrwg40AQoDmAQlyrrCjpWYsJ63XPIYbs:DOICgpB5GBrMVyJWrwgh5AQorrYWbJ6K
- TLSH
  T1E5E41247A2A5B4FCF55BE03C84714D49EB32B8751A70CB5F67240A9A0F277C09E2AB71
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer discovery
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryspywarestealer

© 2018-2026

Terms | Privacy