2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc
Size 1.3MB
Sample260802-wgswvsde97
SHA256 baa842340a7fb53b71b77f6fe0d0285030dbe83d65dba0fe3a8afdaedbaac14d
MD5 81a6b93dfc55f090fe1e1fa1cf6170c6
SHA1 ca6baac8e4ae221b6dd10ff1ab129a43d8de7088
SHA512 eba14fab35ff5dad2d64a557149d12e45aabbf85d55a0c17cf96fdb688d5ad7c3c2d78f9eb83a3227851e0d08412ee23024efb0a89ea15bc553978f1bd09e855
SSDEEP 24576:U1Ie09d15iwWJIOPGcCWiFBzVaUcqVg+RfgE+1f6AmPdUmiu/tA4ZjI:U5Ud1hiIeCWue9q9fUBmjbG
TLSH
T16E55120573E905F8F4B7C33099B15511BB3378599BB09B8F17A045A98F73B90AE3AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc

File Explorer

2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc

.exe 1.3MB

2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc

IMPHASH beaaba273c64cd6d3674de7c593eecec
SHA256 baa842340a7fb53b71b77f6fe0d0285030dbe83d65dba0fe3a8afdaedbaac14d
MD5 81a6b93dfc55f090fe1e1fa1cf6170c6
SHA1 ca6baac8e4ae221b6dd10ff1ab129a43d8de7088
SHA512 eba14fab35ff5dad2d64a557149d12e45aabbf85d55a0c17cf96fdb688d5ad7c3c2d78f9eb83a3227851e0d08412ee23024efb0a89ea15bc553978f1bd09e855
SSDEEP 24576:U1Ie09d15iwWJIOPGcCWiFBzVaUcqVg+RfgE+1f6AmPdUmiu/tA4ZjI:U5Ud1hiIeCWue9q9fUBmjbG
TLSH
T16E55120573E905F8F4B7C33099B15511BB3378599BB09B8F17A045A98F73B90AE3AB12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47428

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SendMessageW DispatchMessageW TranslateMessage AttachThreadInput PostMessageW DefWindowProcW IsDialogMessageW LoadImageW DestroyIcon LoadIconW LoadCursorW GetWindowThreadProcessId IntersectRect FillRect ScreenToClient MessageBoxW GetWindowRect GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW InvalidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow DrawTextW GetSystemMetrics EnableWindow KillTimer SetTimer SetFocus BringWindowToTop SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage GetMessageW

gdi32

MoveToEx SetTextColor SetBkMode SetBkColor SelectObject RoundRect LineTo GetStockObject DeleteObject CreateSolidBrush CreatePen CreateFontW

comctl32

InitCommonControlsEx

shell32

SHGetPathFromIDListW SHGetKnownFolderPath SHBrowseForFolderW ShellExecuteExW

ole32

CoCreateInstance CoTaskMemFree CoInitializeEx CoUninitialize

advapi32

GetTokenInformation OpenProcessToken RegGetValueW

kernel32

GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFilePointerEx GetFileType GetCommandLineA LCMapStringW HeapReAlloc FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleMode GetConsoleOutputCP HeapSize GetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree WriteConsoleW VirtualProtect QueryPerformanceCounter GetEnvironmentVariableW CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileSize GetFullPathNameW GetVolumePathNameW ReadFile RemoveDirectoryW WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject Sleep GetCurrentProcess GetCurrentProcessId GetExitCodeProcess GetCurrentThreadId CreateProcessW GetWindowsDirectoryW FreeLibrary GetModuleFileNameW GetProcAddress LoadResource LockResource SizeofResource FindResourceW LoadLibraryW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess InitializeSListHead TlsSetValue RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_81a6b93dfc55f090fe1e1fa1cf6170c6_icedid_stealc

user32

gdi32

comctl32

shell32

ole32

advapi32

kernel32

generic