2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid

General

Target
2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid
Size 1.5MB
Sample260715-pc6tlaft2s
SHA256 8a92412a9357b1adfc162b777ce2a3c7c05bf7eeec38ef7353e54610b246ec9d
MD5 43b60ece492495b550ea47cdea0d6c4e
SHA1 c63ce2778af4d89c489762c2ffed732e89231e9b
SHA512 43985731f83566f07e656a67ce982c286a98bdf92243935e1d50cc3706fce2fa1e06d81bfad2a527a71c4c86d47037b4438cd8136c0e1d6c9de76cfaef810071
SSDEEP 24576:TAhYRsc1uEpNIg0GYWLBd7WtLtq8ploROKg:TbR1uEpNN0GYWLBdWtLw8ploRv
TLSH
T1C265E0567B5090F9D0610D704A65EA9D9325BC68D8134F8B32A07FCEFFF2AD18E19A31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid

File Explorer

2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid

.exe 1.5MB

2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid

IMPHASH 8df305cbfddc966a7b6ab459d5570a2d
SHA256 8a92412a9357b1adfc162b777ce2a3c7c05bf7eeec38ef7353e54610b246ec9d
MD5 43b60ece492495b550ea47cdea0d6c4e
SHA1 c63ce2778af4d89c489762c2ffed732e89231e9b
SHA512 43985731f83566f07e656a67ce982c286a98bdf92243935e1d50cc3706fce2fa1e06d81bfad2a527a71c4c86d47037b4438cd8136c0e1d6c9de76cfaef810071
SSDEEP 24576:TAhYRsc1uEpNIg0GYWLBd7WtLtq8ploROKg:TbR1uEpNN0GYWLBdWtLw8ploRv
TLSH
T1C265E0567B5090F9D0610D704A65EA9D9325BC68D8134F8B32A07FCEFFF2AD18E19A31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

6520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

P:\Target\x64\ship\setupexe\x-none\setup.pdb

kernel32

GetLastError SetLastError GetModuleFileNameW GetModuleHandleExW GetProcAddress LoadLibraryW OutputDebugStringA VerifyVersionInfoW CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW FormatMessageW VerSetConditionMask QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwindEx RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapSize GetStdHandle WriteFile GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte ExitProcess GetACP HeapFree HeapAlloc HeapReAlloc GetProcessHeap CloseHandle FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA

Name

.text

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_43b60ece492495b550ea47cdea0d6c4e_icedid

kernel32

generic