General
- Target 2026-08-01_fbbb22b96845db8d90f0585674975319_icedid
- Size 2.6MB
- Sample260802-ech3esteqb
- SHA256 80d47bb6d8de56c244cfbcbeda4d24b3003682dc2c539a20c93b93603e77c890
- MD5 fbbb22b96845db8d90f0585674975319
- SHA1 bd7b3cef8e846fefbcbc279178e3565571854d73
- SHA512 0a4d7cac131588a8da3de361220ac4f860ba8208eda8cb7d5658dd9e65ceedfda997def05cd568d54d9f89b9a568593cf485db61f09ccac7be32ec4efd97fb32
- SSDEEP 49152:yqWUWe0Gf/y73MNxwD4XlMv3hBys/5Tw0ZczoEy5+miY3xLcBWZ5:yqMef/+8oDylMv3hMutwIc0X5+O315
- TLSH T13BD5230A66976EF8C16B94B8C8554587FFB23313C71AD5EF429395326F036D22ED8B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_fbbb22b96845db8d90f0585674975319_icedid.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_fbbb22b96845db8d90f0585674975319_icedid.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_fbbb22b96845db8d90f0585674975319_icedid
- Size 2.6MB
- SHA256 80d47bb6d8de56c244cfbcbeda4d24b3003682dc2c539a20c93b93603e77c890
- MD5 fbbb22b96845db8d90f0585674975319
- SHA1 bd7b3cef8e846fefbcbc279178e3565571854d73
- SHA512 0a4d7cac131588a8da3de361220ac4f860ba8208eda8cb7d5658dd9e65ceedfda997def05cd568d54d9f89b9a568593cf485db61f09ccac7be32ec4efd97fb32
- SSDEEP 49152:yqWUWe0Gf/y73MNxwD4XlMv3hBys/5Tw0ZczoEy5+miY3xLcBWZ5:yqMef/+8oDylMv3hMutwIc0X5+O315
- TLSH T13BD5230A66976EF8C16B94B8C8554587FFB23313C71AD5EF429395326F036D22ED8B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Scheduled Task/Job
1Scheduled Task
1