General
- Target 2026-08-01_18f0b6232796db1d720b32d5f4be6923_icedid
- Size 2.6MB
- Sample260802-ey47sas1es
- SHA256 98c01c972208f29c9454ed4d18db650a6ca16c368f91524999c7872700876299
- MD5 18f0b6232796db1d720b32d5f4be6923
- SHA1 b16c77aafef968f223a1aca1d333c822a5c260a6
- SHA512 95542d219ba17d7dadffb23b87930888959999c1bc52d91d63ce612ceea32406eeaa5c8b02836e6928f2a7ba6ac2ffe20dd5a9675eed85c9139fef94b5d39d23
- SSDEEP 49152:mV4ExGS81p9ighF7KkzLDTwqSpLTS4eAuSKgP49Z4uANxqdwdKFc8T6TYc:mWql8diu7bpASl2VJXqAi6r
- TLSH T10ED52342F6A775ECE1BA8AB48C1546CDB332B761C3434BEA06A775386F036D17D18B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_18f0b6232796db1d720b32d5f4be6923_icedid.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_18f0b6232796db1d720b32d5f4be6923_icedid.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_18f0b6232796db1d720b32d5f4be6923_icedid
- Size 2.6MB
- SHA256 98c01c972208f29c9454ed4d18db650a6ca16c368f91524999c7872700876299
- MD5 18f0b6232796db1d720b32d5f4be6923
- SHA1 b16c77aafef968f223a1aca1d333c822a5c260a6
- SHA512 95542d219ba17d7dadffb23b87930888959999c1bc52d91d63ce612ceea32406eeaa5c8b02836e6928f2a7ba6ac2ffe20dd5a9675eed85c9139fef94b5d39d23
- SSDEEP 49152:mV4ExGS81p9ighF7KkzLDTwqSpLTS4eAuSKgP49Z4uANxqdwdKFc8T6TYc:mWql8diu7bpASl2VJXqAi6r
- TLSH T10ED52342F6A775ECE1BA8AB48C1546CDB332B761C3434BEA06A775386F036D17D18B20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Registers new Windows logon scripts automatically executed at logon.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Boot or Logon Initialization Scripts
1Logon Script (Windows)
1Scheduled Task/Job
1Scheduled Task
1