General
- Target 2026-08-16_278727782260db1ac98b7e6899be4df9_icedid_vidar
- Size 689KB
- Sample260816-3rbtnage68
- SHA256 50deeea01dc58912e93b6a15f1528f1cd8fdf4a98a9c9808a7d4b221faa3590b
- MD5 278727782260db1ac98b7e6899be4df9
- SHA1 c649129b7e2a85e228914fb2ab03969f71a95474
- SHA512 2070df59f496e03d6fdff9d35f0551420f04de78b8b6a02924d6da4b5ca2cc86b82c0a142b589c9b610eca7bd3f232f27eef3a4bcd8c68f5a1305576a0cf54a0
- SSDEEP 12288:pl8YfymOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:ouOpayI7qWwfMaCGRdd3aEHX
- TLSH T11CE41247A7A631F9E3F4A678DBA54609C7B1F43202719F8F17A442964F233D18D26F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_278727782260db1ac98b7e6899be4df9_icedid_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_278727782260db1ac98b7e6899be4df9_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_278727782260db1ac98b7e6899be4df9_icedid_vidar
- Size 689KB
- SHA256 50deeea01dc58912e93b6a15f1528f1cd8fdf4a98a9c9808a7d4b221faa3590b
- MD5 278727782260db1ac98b7e6899be4df9
- SHA1 c649129b7e2a85e228914fb2ab03969f71a95474
- SHA512 2070df59f496e03d6fdff9d35f0551420f04de78b8b6a02924d6da4b5ca2cc86b82c0a142b589c9b610eca7bd3f232f27eef3a4bcd8c68f5a1305576a0cf54a0
- SSDEEP 12288:pl8YfymOpagJNmT3GLuqWPMrZNfMi3osu+KGRPwcd3ATzBEJWgX:ouOpayI7qWwfMaCGRdd3aEHX
- TLSH T11CE41247A7A631F9E3F4A678DBA54609C7B1F43202719F8F17A442964F233D18D26F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1