General
- Target 2026-07-13_5c74cd1492653c37818a480c873d3765_icedid_stealc
- Size 3.8MB
- Sample260713-tg6fvaby4p
- SHA256 df9b276c9a4a9052d988f0e7598d28fcaff0b30566c152b1d93935e6c5a886b1
- MD5 5c74cd1492653c37818a480c873d3765
- SHA1 c19addb8d623444137536cabed6846cc4d9984d1
- SHA512 bc57afa7107db69af71e246ec165cbc7ca6db4ac728e55303e163843abca5b5b32deb438addfb45f47827fccf09f93d419fa254f38178cf1b6f5f54318521007
- SSDEEP 49152:J04sz6gxh+pPG2n7Ec/TD80pfeGFxWEVyYWt7h7XGgd3LeHCl+NuS+2I1XfTE+Ar:JQa
- TLSH T19816D8236ECD61AFD4D3043AFA91A4B2587FAA3D971ADED08047601C3DF90D9461EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_5c74cd1492653c37818a480c873d3765_icedid_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_5c74cd1492653c37818a480c873d3765_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_5c74cd1492653c37818a480c873d3765_icedid_stealc
- Size 3.8MB
- SHA256 df9b276c9a4a9052d988f0e7598d28fcaff0b30566c152b1d93935e6c5a886b1
- MD5 5c74cd1492653c37818a480c873d3765
- SHA1 c19addb8d623444137536cabed6846cc4d9984d1
- SHA512 bc57afa7107db69af71e246ec165cbc7ca6db4ac728e55303e163843abca5b5b32deb438addfb45f47827fccf09f93d419fa254f38178cf1b6f5f54318521007
- SSDEEP 49152:J04sz6gxh+pPG2n7Ec/TD80pfeGFxWEVyYWt7h7XGgd3LeHCl+NuS+2I1XfTE+Ar:JQa
- TLSH T19816D8236ECD61AFD4D3043AFA91A4B2587FAA3D971ADED08047601C3DF90D9461EB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of NtCreateThreadExHideFromDebugger