6cb9fe8945b971c87a92e21c6587d2441d5d8903eb1be86b59ed96595b68a537 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-05...ar.exe

windows10-2004-x64

7

2026-08-05...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_618cebf28ddedb055864755909090d89_icedid_vidar
Size 689KB
Sample260805-dk1f1axamd
SHA256 6cb9fe8945b971c87a92e21c6587d2441d5d8903eb1be86b59ed96595b68a537
MD5 618cebf28ddedb055864755909090d89
SHA1 7bfc8e335c41f2fb04b2b9f3e52469a00b8e947c
SHA512 e792d75e43e438b135c65c63af7c57e5a1331ead57597992519394235168b2103bd052e97a830c06984ca6aa655b3f48145d4602b0f4b2fa9ddbe7257558cd47
SSDEEP 12288:qrxxfOPRhACgDHMo42+kBZEHgUOMBQPWyTRZqZiQb2nQkcJUS8r2p/:ky5uc2xZEHnQPlRZqALcJTY4/
TLSH
T18BE41297B2E631E4D2678238C5611E0CAB32F47117629B1F2B58816A5F237D58D3BF32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-05_618cebf28ddedb055864755909090d89_icedid_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

spyware stealer

Behavioral task

behavioral2

Sample

2026-08-05_618cebf28ddedb055864755909090d89_icedid_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

150 seconds

discovery ransomware spyware stealer

Malware Config

Targets

- Target
  2026-08-05_618cebf28ddedb055864755909090d89_icedid_vidar
- Size 689KB
- SHA256 6cb9fe8945b971c87a92e21c6587d2441d5d8903eb1be86b59ed96595b68a537
- MD5 618cebf28ddedb055864755909090d89
- SHA1 7bfc8e335c41f2fb04b2b9f3e52469a00b8e947c
- SHA512 e792d75e43e438b135c65c63af7c57e5a1331ead57597992519394235168b2103bd052e97a830c06984ca6aa655b3f48145d4602b0f4b2fa9ddbe7257558cd47
- SSDEEP 12288:qrxxfOPRhACgDHMo42+kBZEHgUOMBQPWyTRZqZiQb2nQkcJUS8r2p/:ky5uc2xZEHnQPlRZqALcJTY4/
- TLSH
  T18BE41297B2E631E4D2678238C5611E0CAB32F47117629B1F2B58816A5F237D58D3BF32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer discovery ransomware
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryransomwarespywarestealer

© 2018-2026

Terms | Privacy