2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc

General

Target
2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc
Size 1.5MB
Sample260804-flm86swshs
SHA256 db8c4d24e4b0b904f89de545330efeb56887e1cbeb7c447b30728c01ad32e7cf
MD5 eed28f6aa0b55a8ee785c005709bd955
SHA1 7026a11c53c3454442a1b801c607ceee58192724
SHA512 9fce598bc0a67816aa1472ae1af155e90b24775dac3035d45a05e7c03fffa79eee2a632a5794d81c0d68946c06af78f6c794add70203973cfa1499e63e5551d4
SSDEEP 24576:+Nwtzmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:6wQb5+Pl6bJTIZ5jdgp
TLSH
T1DD750247A66630EAD16B8539C585CA30FB727C718B916BEB47E03DA77E322905D3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc

File Explorer

2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc

.exe 1.5MB

2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc

IMPHASH fc00ad2562a0da7ed0dd2e99080b4b66
SHA256 db8c4d24e4b0b904f89de545330efeb56887e1cbeb7c447b30728c01ad32e7cf
MD5 eed28f6aa0b55a8ee785c005709bd955
SHA1 7026a11c53c3454442a1b801c607ceee58192724
SHA512 9fce598bc0a67816aa1472ae1af155e90b24775dac3035d45a05e7c03fffa79eee2a632a5794d81c0d68946c06af78f6c794add70203973cfa1499e63e5551d4
SSDEEP 24576:+Nwtzmb57GBiOl6a8JTth/RWZvR6wQQ92pN3:6wQb5+Pl6bJTIZ5jdgp
TLSH
T1DD750247A66630EAD16B8539C585CA30FB727C718B916BEB47E03DA77E322905D3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

https://imgur.com/a/PiWvsB0

shlwapi

PathFindFileNameW PathCombineW PathRemoveFileSpecW

kernel32

TlsGetValue WriteConsoleW CreateFileW CreateToolhelp32Snapshot GetCurrentProcessId Process32FirstW Process32NextW CloseHandle GetModuleFileNameW CreateMutexW GetLastError GetCommandLineW LocalFree GetEnvironmentVariableW LoadLibraryW GetProcAddress WaitForSingleObject GetExitCodeProcess FreeLibrary GetModuleHandleExW GetModuleHandleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsSetValue TlsFree LoadLibraryExW GetStdHandle WriteFile ExitProcess HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc

user32

MessageBoxW

shell32

CommandLineToArgvW ShellExecuteExW

Name

.text

Size

75KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_eed28f6aa0b55a8ee785c005709bd955_icedid_stealc

shlwapi

kernel32

user32

shell32

generic