ff95080975a52c2dd563d5ddc9b74f263082277ee3d6c0299ebc4a8738c921bd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-08...ar.exe

windows10-2004-x64

7

2026-07-08...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_ece15b31b3f2832ebd6c8ea936009591_icedid_stealc_vidar
Size 748KB
Sample260708-em8e3aa19q
SHA256 ff95080975a52c2dd563d5ddc9b74f263082277ee3d6c0299ebc4a8738c921bd
MD5 ece15b31b3f2832ebd6c8ea936009591
SHA1 802ea20452a38231e7261aae347e16414f51e723
SHA512 b8870be7445cdd702a49e98e7a5ea0ef1610b2169faffd2c2b34cf85b2313f4dd28430ca6be92f0e80d2c6a6ae352a5f02ff50335312ee41e91247da054193b7
SSDEEP 12288:HR4bdAT9VJhor2Ca8lKYK2krUyEGGgp9IobHGqR+pf3jJwkDzVJUxrnoC:HRcdA5VJhqlXKEFG1rDHmj7dip
TLSH
T1B1F40107B3D520F9E1321938D9125A55E372B8B10B609FBF02A81376DF676614E2FF29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-08_ece15b31b3f2832ebd6c8ea936009591_icedid_stealc_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

discovery spyware stealer

Behavioral task

behavioral2

Sample

2026-07-08_ece15b31b3f2832ebd6c8ea936009591_icedid_stealc_vidar.exe

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

discovery spyware stealer

Malware Config

Targets

- Target
  2026-07-08_ece15b31b3f2832ebd6c8ea936009591_icedid_stealc_vidar
- Size 748KB
- SHA256 ff95080975a52c2dd563d5ddc9b74f263082277ee3d6c0299ebc4a8738c921bd
- MD5 ece15b31b3f2832ebd6c8ea936009591
- SHA1 802ea20452a38231e7261aae347e16414f51e723
- SHA512 b8870be7445cdd702a49e98e7a5ea0ef1610b2169faffd2c2b34cf85b2313f4dd28430ca6be92f0e80d2c6a6ae352a5f02ff50335312ee41e91247da054193b7
- SSDEEP 12288:HR4bdAT9VJhor2Ca8lKYK2krUyEGGgp9IobHGqR+pf3jJwkDzVJUxrnoC:HRcdA5VJhqlXKEFG1rDHmj7dip
- TLSH
  T1B1F40107B3D520F9E1321938D9125A55E372B8B10B609FBF02A81376DF676614E2FF29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer

© 2018-2026

Terms | Privacy