2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc

General

Target
2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc
Size 72.9MB
Sample260804-dftsnaca35
SHA256 7ff7d147e0a83dc74c159f3cd77c6b21beb0061df72503f5983c820e46b488d0
MD5 4c16446d42ee30bc3532420c442d1836
SHA1 75e4b2d69bb15a181e3499ab811c92cf76ebe1fd
SHA512 c28098bc0b57da40e56af928f57576e4b95469594f2ff4745b871290128f7213cad96d3668442dc29f19370a4142027138ac2b052e1dc7a00be3955d42a0a3ae
SSDEEP 1572864:saBaZrW+ZcWJ3oMMYm6rSSI91DeyxLR9BjQm:KrBFobYE1x
TLSH
T10CF7014BADB5049E3A52CF1B6376FBD963DE35C968C69C3CC912EFD4A2342012B90953
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc

File Explorer

2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc

.exe 72.9MB

2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc

IMPHASH a2fb9614eff2227fc2831dd74ee6bca2
SHA256 7ff7d147e0a83dc74c159f3cd77c6b21beb0061df72503f5983c820e46b488d0
MD5 4c16446d42ee30bc3532420c442d1836
SHA1 75e4b2d69bb15a181e3499ab811c92cf76ebe1fd
SHA512 c28098bc0b57da40e56af928f57576e4b95469594f2ff4745b871290128f7213cad96d3668442dc29f19370a4142027138ac2b052e1dc7a00be3955d42a0a3ae
SSDEEP 1572864:saBaZrW+ZcWJ3oMMYm6rSSI91DeyxLR9BjQm:KrBFobYE1x
TLSH
T10CF7014BADB5049E3A52CF1B6376FBD963DE35C968C69C3CC912EFD4A2342012B90953
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

39632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle HeapReAlloc GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW CreateFileW WriteConsoleW GetModuleHandleW GetProcAddress GetCurrentProcessId CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable InitializeCriticalSectionEx GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW GetFileType SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA

user32

FillRect GetClientRect SetWindowTextW UpdateWindow GetSystemMetrics ShowWindow DestroyWindow LoadCursorW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW SendMessageW DispatchMessageW TranslateMessage GetMessageW CreateWindowExW

gdi32

SetBkMode DeleteObject CreateSolidBrush CreateFontW SetTextColor

comctl32

InitCommonControlsEx

Name

.text

Size

97KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

72.7MB

Virtual Size

72.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_4c16446d42ee30bc3532420c442d1836_icedid_stealc

kernel32

user32

gdi32

comctl32

generic