General
- Target 2026-07-05_2284e4257cb9eea83679e440d98c9b8b_icedid_stealc
- Size 3.8MB
- Sample260705-mek9kaby7w
- SHA256 221c3e265de1c4540ccb44752f26c902784cdd28bbcc58f12cf0706bfbeb5ac1
- MD5 2284e4257cb9eea83679e440d98c9b8b
- SHA1 bfecce2299cd8a55c7d14a092f46bc34c1f82127
- SHA512 9a6a78defdfe5ad9b5d3935d70df46564e174a4c2df9b7a76bfb31d9f7e3fe8c048d4a47ef490efaddfaf92595c31f3ad0c449fefb182ab8fafd97f07973aa08
- SSDEEP 49152:7ofaPFQ+Mm8qOBdvcN16+LFdeBbgbbaes4REj50wxVQ1ub0+j4Hgw/McxXVH1bzD:F
- TLSH T18D062A73658D32CFD4920436E512A1B3A9BEE832A71F53E4D09B802D39D90DA561FFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_2284e4257cb9eea83679e440d98c9b8b_icedid_stealc.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_2284e4257cb9eea83679e440d98c9b8b_icedid_stealc.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_2284e4257cb9eea83679e440d98c9b8b_icedid_stealc
- Size 3.8MB
- SHA256 221c3e265de1c4540ccb44752f26c902784cdd28bbcc58f12cf0706bfbeb5ac1
- MD5 2284e4257cb9eea83679e440d98c9b8b
- SHA1 bfecce2299cd8a55c7d14a092f46bc34c1f82127
- SHA512 9a6a78defdfe5ad9b5d3935d70df46564e174a4c2df9b7a76bfb31d9f7e3fe8c048d4a47ef490efaddfaf92595c31f3ad0c449fefb182ab8fafd97f07973aa08
- SSDEEP 49152:7ofaPFQ+Mm8qOBdvcN16+LFdeBbgbbaes4REj50wxVQ1ub0+j4Hgw/McxXVH1bzD:F
- TLSH T18D062A73658D32CFD4920436E512A1B3A9BEE832A71F53E4D09B802D39D90DA561FFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.