General
- Target 2026-08-20_2647dee35a6e9464bb3f7ca332481667_icedid_stealc
- Size 8.1MB
- Sample260821-drgbpsv1hw
- SHA256 1a1ee8d900331719504add8c0a7800c43b7502e5ba924d68fcf853d824e4bc58
- MD5 2647dee35a6e9464bb3f7ca332481667
- SHA1 3dd84025cb03af9a26867ac46d034d6744fef18e
- SHA512 bea12d1a01c8cf5f1687f132a3c97a2e8da84cadaa13aae41a8038e6519baf9daa96eab6f82ac837b57f1ab1c39a5970f686827750c1904830e9c11236539e8b
- SSDEEP 98304:y+02He6CTDMITdno+3AqGjU5B5qZ0JU+S6FIMKNjj1yccGZ:51CTVTdnj3PMUvPiGojUcT
- TLSH T14F86D017D22BD2D7D5B13673F61521430EE066425FACBEDB8D14ECA50E9CB20BE8894E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2647dee35a6e9464bb3f7ca332481667_icedid_stealc.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2647dee35a6e9464bb3f7ca332481667_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2647dee35a6e9464bb3f7ca332481667_icedid_stealc
- Size 8.1MB
- SHA256 1a1ee8d900331719504add8c0a7800c43b7502e5ba924d68fcf853d824e4bc58
- MD5 2647dee35a6e9464bb3f7ca332481667
- SHA1 3dd84025cb03af9a26867ac46d034d6744fef18e
- SHA512 bea12d1a01c8cf5f1687f132a3c97a2e8da84cadaa13aae41a8038e6519baf9daa96eab6f82ac837b57f1ab1c39a5970f686827750c1904830e9c11236539e8b
- SSDEEP 98304:y+02He6CTDMITdno+3AqGjU5B5qZ0JU+S6FIMKNjj1yccGZ:51CTVTdnj3PMUvPiGojUcT
- TLSH T14F86D017D22BD2D7D5B13673F61521430EE066425FACBEDB8D14ECA50E9CB20BE8894E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers