2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz

General

Target
2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz
Size 2.2MB
Sample260804-fwmemasajb
SHA256 bfbcf50295092b2c60c25c745692d9cf3d8c3f0132ec239b5fc549c46a35a760
MD5 dd53071defcb6dd65e2ca88f9096fb60
SHA1 95a49ba09637454e2511348959f9609ae2ca56de
SHA512 9a27a9407d0430f6b4a7fb1a4ab040a72ed9643053e690348585ba7d8fad925f2d65fbd7b07d8e237c85ea1dcf3a2db6ecca2e0c1f46b63f1fa79348476586b0
SSDEEP 49152:WsOEje027NnzSEPElYdfM7J9JDN6uXDg:WJh02BPAiMF9/DE
TLSH
T1DAB5C0E461D23570E0F2B13B3489731BAE26A59CC5DC792122BE470ACF783C65DBA15E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz

File Explorer

2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz

.exe 2.2MB

2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz

IMPHASH d86cdea1fdce2e63ab22a5212445ab36
SHA256 bfbcf50295092b2c60c25c745692d9cf3d8c3f0132ec239b5fc549c46a35a760
MD5 dd53071defcb6dd65e2ca88f9096fb60
SHA1 95a49ba09637454e2511348959f9609ae2ca56de
SHA512 9a27a9407d0430f6b4a7fb1a4ab040a72ed9643053e690348585ba7d8fad925f2d65fbd7b07d8e237c85ea1dcf3a2db6ecca2e0c1f46b63f1fa79348476586b0
SSDEEP 49152:WsOEje027NnzSEPElYdfM7J9JDN6uXDg:WJh02BPAiMF9/DE
TLSH
T1DAB5C0E461D23570E0F2B13B3489731BAE26A59CC5DC792122BE470ACF783C65DBA15E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6932

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW GetFileSize ReadFile CloseHandle HeapAlloc HeapFree GetProcessHeap GetCurrentProcess FlushInstructionCache VirtualAlloc VirtualProtect GetProcAddress LoadResource LockResource SizeofResource LoadLibraryA FindResourceA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_dd53071defcb6dd65e2ca88f9096fb60_icedid_mimikatz

kernel32

generic