General
- Target 2026-08-03_a9dc5c450f6c0b3c0af31ccc9dd0daf0_icedid_stealc_vidar
- Size 751KB
- Sample260803-csnlqswgpb
- SHA256 574ea9f1cc241989e66c966021cec779349871df510dee26523e49e4b967bda4
- MD5 a9dc5c450f6c0b3c0af31ccc9dd0daf0
- SHA1 ae0d69edc15378e6e4f4acc2804ec3f7fae89ccf
- SHA512 eef85759da40ba4c37546c6901156eb776b6e51725576a78bc71f7771ed97695657a79adbb34f0eefc7eef8f3876804fa92486effe911f93366e38a89313cb3d
- SSDEEP 12288:cRm18ET90J8or2WWLs+Tr99kvdqat+F7dx1z6xYrRdKsjUKWuEcWFwnF:cRQ8E50J8qNG9wdZt+F7jVgCRUsA7uEM
- TLSH T18DF40107B2A531F9F4379438CC218A09F376B8761371AE7F5699426ADF376004D2AF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a9dc5c450f6c0b3c0af31ccc9dd0daf0_icedid_stealc_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a9dc5c450f6c0b3c0af31ccc9dd0daf0_icedid_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a9dc5c450f6c0b3c0af31ccc9dd0daf0_icedid_stealc_vidar
- Size 751KB
- SHA256 574ea9f1cc241989e66c966021cec779349871df510dee26523e49e4b967bda4
- MD5 a9dc5c450f6c0b3c0af31ccc9dd0daf0
- SHA1 ae0d69edc15378e6e4f4acc2804ec3f7fae89ccf
- SHA512 eef85759da40ba4c37546c6901156eb776b6e51725576a78bc71f7771ed97695657a79adbb34f0eefc7eef8f3876804fa92486effe911f93366e38a89313cb3d
- SSDEEP 12288:cRm18ET90J8or2WWLs+Tr99kvdqat+F7dx1z6xYrRdKsjUKWuEcWFwnF:cRQ8E50J8qNG9wdZt+F7jVgCRUsA7uEM
- TLSH T18DF40107B2A531F9F4379438CC218A09F376B8761371AE7F5699426ADF376004D2AF26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1