83891485c41ecefb8157cbe99b86c75572e263a3673e4642bcca4a5e4055ddbd | Triage™

Login
Reports

Overview

overview

7

Static

static

3

2026-08-16...ar.exe

windows10-2004-x64

7

2026-08-16...ar.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-16_b38c3c950f9185cc2fbe18ef89c9f55a_icedid_vidar
Size 689KB
Sample260816-29fpwsbq4x
SHA256 83891485c41ecefb8157cbe99b86c75572e263a3673e4642bcca4a5e4055ddbd
MD5 b38c3c950f9185cc2fbe18ef89c9f55a
SHA1 bdfa676c27ed779930af4698fd84c8a4a8bb98a8
SHA512 0af6a6e8119a6c15d8a08641f7e5e1ba134f3fc4dceebc0068fcbb2098f15b9c7729b192ce17e754649672161876af086ff8038f4a4f3650477ea108632c3425
SSDEEP 12288:kbKdfqzwlUMeVV2H2WVK1Flzk5zrUv37HYVXt6cuhryyf8JgCqPqHS8ytjhEAWCS:pVSMgKK1jczrUv3749Bm2yf8IP8ytjqJ
TLSH
T16BE4134772E931E8E1BA9A7CC5960A05CB76B8741A319B1F477002672F23791DE27F32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware spyware stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-16_b38c3c950f9185cc2fbe18ef89c9f55a_icedid_vidar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

discovery ransomware spyware stealer

Behavioral task

behavioral2

Sample

2026-08-16_b38c3c950f9185cc2fbe18ef89c9f55a_icedid_vidar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

spyware stealer

Malware Config

Targets

- Target
  2026-08-16_b38c3c950f9185cc2fbe18ef89c9f55a_icedid_vidar
- Size 689KB
- SHA256 83891485c41ecefb8157cbe99b86c75572e263a3673e4642bcca4a5e4055ddbd
- MD5 b38c3c950f9185cc2fbe18ef89c9f55a
- SHA1 bdfa676c27ed779930af4698fd84c8a4a8bb98a8
- SHA512 0af6a6e8119a6c15d8a08641f7e5e1ba134f3fc4dceebc0068fcbb2098f15b9c7729b192ce17e754649672161876af086ff8038f4a4f3650477ea108632c3425
- SSDEEP 12288:kbKdfqzwlUMeVV2H2WVK1Flzk5zrUv37HYVXt6cuhryyf8JgCqPqHS8ytjhEAWCS:pVSMgKK1jczrUv3749Bm2yf8IP8ytjqJ
- TLSH
  T16BE4134772E931E8E1BA9A7CC5960A05CB76B8741A319B1F477002672F23791DE27F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery ransomware spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomwarespywarestealer

behavioral2

© 2018-2026

Terms | Privacy