3266425eb86d4fbd294a9a63f094b2045a1f65965a6bbbc11b3b5e41b7fb05cd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-07-20...ar.exe

windows10-2004-x64

7

2026-07-20...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_b1db7f8ba6700c29a3a1881f66863c65_icedid_stealc_vidar
Size 748KB
Sample260720-c6al2afv9t
SHA256 3266425eb86d4fbd294a9a63f094b2045a1f65965a6bbbc11b3b5e41b7fb05cd
MD5 b1db7f8ba6700c29a3a1881f66863c65
SHA1 bd54651db61a3bb3a75f2313a6f61e09e519b793
SHA512 7d35a71436a23f74e7514202b09f3fc880edb955c20e8701b2e6e658d77b9b97137a8897595c311247762ac706d9518cf7b1e3213722ea650ecae6cca430369a
SSDEEP 12288:HRBVdXT6yJHor2rpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:HRDdXGyJHqcpBbsVLFdoQ8b5CqmLYq
TLSH
T1A9F40267B3A630F9F0B39039C9614A05E775B97153B18F7F02688326EF136509D2AF26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-07-20_b1db7f8ba6700c29a3a1881f66863c65_icedid_stealc_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

spyware stealer

Behavioral task

behavioral2

Sample

2026-07-20_b1db7f8ba6700c29a3a1881f66863c65_icedid_stealc_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-07-20_b1db7f8ba6700c29a3a1881f66863c65_icedid_stealc_vidar
- Size 748KB
- SHA256 3266425eb86d4fbd294a9a63f094b2045a1f65965a6bbbc11b3b5e41b7fb05cd
- MD5 b1db7f8ba6700c29a3a1881f66863c65
- SHA1 bd54651db61a3bb3a75f2313a6f61e09e519b793
- SHA512 7d35a71436a23f74e7514202b09f3fc880edb955c20e8701b2e6e658d77b9b97137a8897595c311247762ac706d9518cf7b1e3213722ea650ecae6cca430369a
- SSDEEP 12288:HRBVdXT6yJHor2rpVzbsVSjcrFCeoQ83J1+WevqmLzUqSer:HRDdXGyJHqcpBbsVLFdoQ8b5CqmLYq
- TLSH
  T1A9F40267B3A630F9F0B39039C9614A05E775B97153B18F7F02688326EF136509D2AF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer discovery ransomware
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy