Analysis
- max time kernel
150s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
08/07/2026, 14:55
General
- Target 2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.exe
- Size 12.1MB
- Sample260708-sawsdshz2m
- SHA256 37d92501ea9a8c4887da663c0620ab010ac3d3953f8db82f1efb983b097fb96a
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 12 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.kp.2016.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.kp.2016.exe"2⤵
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
2026-07-08_87c22c8b0e6058cde6794fb450cfc4c3_icedid_stealc.kp.2016.exe
memory/4236-5-0x00007FF632114000-0x00007FF63278E000-memory.dmp
memory/4236-7-0x00007FFE13B20000-0x00007FFE13B22000-memory.dmp
memory/4236-6-0x00007FFE13B10000-0x00007FFE13B12000-memory.dmp
memory/4236-8-0x00007FFE12040000-0x00007FFE12042000-memory.dmp
memory/4236-9-0x00007FFE12050000-0x00007FFE12052000-memory.dmp
memory/4236-10-0x00007FFE11410000-0x00007FFE11412000-memory.dmp
memory/4236-11-0x00007FFE11420000-0x00007FFE11422000-memory.dmp
memory/4236-13-0x00007FFE13B40000-0x00007FFE13B42000-memory.dmp
memory/4236-12-0x00007FFE13B30000-0x00007FFE13B32000-memory.dmp
memory/4236-14-0x00007FFE13B50000-0x00007FFE13B52000-memory.dmp
memory/4236-16-0x00007FFE13B70000-0x00007FFE13B72000-memory.dmp
memory/4236-20-0x00007FFE13BB0000-0x00007FFE13BB2000-memory.dmp
memory/4236-22-0x00007FFE13BD0000-0x00007FFE13BD2000-memory.dmp
memory/4236-21-0x00007FFE13BC0000-0x00007FFE13BC2000-memory.dmp
memory/4236-19-0x00007FFE13BA0000-0x00007FFE13BA2000-memory.dmp
memory/4236-23-0x00007FFE13BE0000-0x00007FFE13BE2000-memory.dmp
memory/4236-18-0x00007FFE13B90000-0x00007FFE13B92000-memory.dmp
memory/4236-17-0x00007FFE13B80000-0x00007FFE13B82000-memory.dmp
memory/4236-15-0x00007FFE13B60000-0x00007FFE13B62000-memory.dmp
memory/4236-24-0x00007FFE13BF0000-0x00007FFE13BF2000-memory.dmp
memory/4236-25-0x00007FFE13C00000-0x00007FFE13C02000-memory.dmp
memory/4236-27-0x00007FFE13C20000-0x00007FFE13C22000-memory.dmp
memory/4236-26-0x00007FFE13C10000-0x00007FFE13C12000-memory.dmp
memory/4236-29-0x000001F6D5CA0000-0x000001F6D5CC7000-memory.dmp
memory/4236-28-0x00007FFE13C30000-0x00007FFE13C32000-memory.dmp
memory/4236-35-0x00007FF631BD0000-0x00007FF63338E000-memory.dmp
memory/4236-36-0x00007FF632114000-0x00007FF63278E000-memory.dmp
memory/4236-37-0x00007FF631BD0000-0x00007FF63338E000-memory.dmp