General
- Target 2026-07-23_d01713b1df2ae8a71b44f452d4d55910_akira_icedid_rusty-stealer
- Size 1.9MB
- Sample260723-wmddcssshv
- SHA256 48368292175b8306e74da333b1669b16c0cec3e8b7d255fda0a692060c61c488
- MD5 d01713b1df2ae8a71b44f452d4d55910
- SHA1 d37960b7a75ee2930fbccb49e697a6aea5fd6062
- SHA512 21a42993d495492ce2d71c033920960f2e666bfdf6db5aa080b31d7ef3952f829a91432a33b63cf67efb96a6688e5f9e62f20748f7d778c1b9352071a09dafee
- SSDEEP 49152:Hpi3t/VKZQ6XHgdo9O8kZPcgL/ApRBvFIVx1sMknIQ1X:JItoQ6XAt8kFL/OvFIVvHRQ1X
- TLSH T155951266B5AC4490F56E43F4D96B245BA98274812F627AFF03B080F11CB87F0ABF9751
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_d01713b1df2ae8a71b44f452d4d55910_akira_icedid_rusty-stealer.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_d01713b1df2ae8a71b44f452d4d55910_akira_icedid_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_d01713b1df2ae8a71b44f452d4d55910_akira_icedid_rusty-stealer
- Size 1.9MB
- SHA256 48368292175b8306e74da333b1669b16c0cec3e8b7d255fda0a692060c61c488
- MD5 d01713b1df2ae8a71b44f452d4d55910
- SHA1 d37960b7a75ee2930fbccb49e697a6aea5fd6062
- SHA512 21a42993d495492ce2d71c033920960f2e666bfdf6db5aa080b31d7ef3952f829a91432a33b63cf67efb96a6688e5f9e62f20748f7d778c1b9352071a09dafee
- SSDEEP 49152:Hpi3t/VKZQ6XHgdo9O8kZPcgL/ApRBvFIVx1sMknIQ1X:JItoQ6XAt8kFL/OvFIVvHRQ1X
- TLSH T155951266B5AC4490F56E43F4D96B245BA98274812F627AFF03B080F11CB87F0ABF9751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)
-
Detects executables referencing many IR and analysis tools
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Executes dropped EXE
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses cryptocurrency files/wallets, possible credential harvesting