General
- Target 2026-08-08_1736848519da9477096982ae5870f621_icedid
- Size 1.0MB
- Sample260808-wtxetaeh24
- SHA256 fde5b7a6de56f8d5a271a1432c728ac7db62b1b1fd666350259669ea539f394e
- MD5 1736848519da9477096982ae5870f621
- SHA1 cbc1bf92977e6cb1d1f1cf4f4e089d541c9c7310
- SHA512 d1550bbe102bd1cb71c8a5e461d276aeb070ea4f3cebfd6910a41dbc58e59a88ebf4fd65711e5948979d167cde4caa1947712fd7a3a66d91c5e8311db9a0711b
- SSDEEP 24576:JbFgsfsWTA3MvdzkXQ060BTFBbz5uypOcvxVTubWCpK:JbFfsWTo6p0rBfBuypZuy
- TLSH T18E3512866ED636F8E1EE9234C0275A12E7FAB87543209BDF07F05D405F235908E7AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_1736848519da9477096982ae5870f621_icedid.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_1736848519da9477096982ae5870f621_icedid.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_1736848519da9477096982ae5870f621_icedid
- Size 1.0MB
- SHA256 fde5b7a6de56f8d5a271a1432c728ac7db62b1b1fd666350259669ea539f394e
- MD5 1736848519da9477096982ae5870f621
- SHA1 cbc1bf92977e6cb1d1f1cf4f4e089d541c9c7310
- SHA512 d1550bbe102bd1cb71c8a5e461d276aeb070ea4f3cebfd6910a41dbc58e59a88ebf4fd65711e5948979d167cde4caa1947712fd7a3a66d91c5e8311db9a0711b
- SSDEEP 24576:JbFgsfsWTA3MvdzkXQ060BTFBbz5uypOcvxVTubWCpK:JbFfsWTo6p0rBfBuypZuy
- TLSH T18E3512866ED636F8E1EE9234C0275A12E7FAB87543209BDF07F05D405F235908E7AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger