General
- Target 2026-07-29_3e052a09ec6a000c9fdf3087446ee38a_icedid
- Size 100.3MB
- Sample260729-dbdkwavvfw
- SHA256 ea2cca9cccd480c11a16a5ffce77697ada877332bdf769b3d9e77853cb63ec93
- MD5 3e052a09ec6a000c9fdf3087446ee38a
- SHA1 189111c79a0c0fb13d6f5e76455ca790c23fbe77
- SHA512 e68eb36246950627d8762258f443fd5bc1edb75e8ce0e4fb9169375e3c5cce09fccff721680cf3d439d509102829c11f9caab4219663704fe4f5fd0a15d318ab
- SSDEEP 98304:5szMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMx:5sV
- TLSH T11C387E2C248AC0A077CF60F7B0E1869A4F0E31BCB5899264E15791F9587543DBB93EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_3e052a09ec6a000c9fdf3087446ee38a_icedid.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_3e052a09ec6a000c9fdf3087446ee38a_icedid.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_3e052a09ec6a000c9fdf3087446ee38a_icedid
- Size 100.3MB
- SHA256 ea2cca9cccd480c11a16a5ffce77697ada877332bdf769b3d9e77853cb63ec93
- MD5 3e052a09ec6a000c9fdf3087446ee38a
- SHA1 189111c79a0c0fb13d6f5e76455ca790c23fbe77
- SHA512 e68eb36246950627d8762258f443fd5bc1edb75e8ce0e4fb9169375e3c5cce09fccff721680cf3d439d509102829c11f9caab4219663704fe4f5fd0a15d318ab
- SSDEEP 98304:5szMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMx:5sV
- TLSH T11C387E2C248AC0A077CF60F7B0E1869A4F0E31BCB5899264E15791F9587543DBB93EB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled