2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar
Size 1.3MB
Sample260710-dblw9act5q
SHA256 75aacfc563c2efeed6b53bda504bb65cd1d578069f82638e6294c9419aaad0ca
MD5 814e29f10f2394a63f472613c26035a8
SHA1 142f883fee506a5313d6ec81937b300341996ecf
SHA512 dcafebf449fe9e1917a8844d78905b3f5def939cfa97a2e6daf201aab1b3f35f29183e3796681f27b5e100657b9c4ed74989ed8ae1f43b492c40c8b99e37f807
SSDEEP 24576:niBRyhdsJ7BsqjnhMgeiCl7G0nehbGZpbD:niBsoBVDmg27RnWGj
TLSH
T14565022A73AD10E9E1734038C951D909FA33787507309ABF43A547BADF771948E3AB62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar

File Explorer

2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar

.exe 1.3MB

2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar

IMPHASH 45efcadb82c24ac1bcbba0768ace92d4
SHA256 75aacfc563c2efeed6b53bda504bb65cd1d578069f82638e6294c9419aaad0ca
MD5 814e29f10f2394a63f472613c26035a8
SHA1 142f883fee506a5313d6ec81937b300341996ecf
SHA512 dcafebf449fe9e1917a8844d78905b3f5def939cfa97a2e6daf201aab1b3f35f29183e3796681f27b5e100657b9c4ed74989ed8ae1f43b492c40c8b99e37f807
SSDEEP 24576:niBRyhdsJ7BsqjnhMgeiCl7G0nehbGZpbD:niBsoBVDmg27RnWGj
TLSH
T14565022A73AD10E9E1734038C951D909FA33787507309ABF43A547BADF771948E3AB62
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

GoogleUpdateComRegisterShell64_unsigned.pdb

advapi32

RegCloseKey RegOverridePredefKey RegOpenKeyExW RegQueryValueExW

kernel32

GetModuleHandleExW FlsAlloc FlsGetValue FlsSetValue FlsFree GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx GetConsoleOutputCP GetConsoleMode WriteConsoleW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetCommandLineW GetModuleFileNameW GetEnvironmentVariableW CloseHandle GetCurrentProcessId VirtualQuery LocalFree SetLastError FindNextFileW GetCurrentProcess FindClose GetFileAttributesExW LoadLibraryW FreeLibrary lstrcmpiW GetTickCount LoadLibraryExW TerminateProcess Sleep lstrlenW MultiByteToWideChar WideCharToMultiByte WriteFile CreateFileW GetSystemTimeAsFileTime FlushFileBuffers GetPrivateProfileIntW OutputDebugStringA GetCurrentThreadId OutputDebugStringW TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection ExitProcess IsDebuggerPresent GetStdHandle GlobalAlloc GlobalFree GlobalLock GlobalUnlock RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer LCMapStringW GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader

user32

wsprintfW MessageBoxW EmptyClipboard CloseClipboard OpenClipboard SetClipboardData CharLowerBuffW

shlwapi

PathStripPathW PathRemoveExtensionW PathRemoveFileSpecW PathAppendW

shell32

CommandLineToArgvW

Name

.text

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gxfg

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_814e29f10f2394a63f472613c26035a8_icedid_stealc_vidar

advapi32

kernel32

user32

shlwapi

shell32

generic