dfca3cfc4c7503f31ae09b708eec5d521919a8a25e841862321226bd28403a71

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 05:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe
Size 2.0MB
Sample260824-gmcphacb98
SHA256 dfca3cfc4c7503f31ae09b708eec5d521919a8a25e841862321226bd28403a71
MD5 8e90c8d712a756cacd74e854599294a3
SHA1 32ced47c7afb8b8a540f5b890c55dec41bc3dc05
SHA512 ebeb158a584c8689da7193035a2b85a3d26b95bbe1eb1fbb7b9e4196485fe5185b1bfef319c849c37f56e21cd8d487656b355b43b6a020b1a7153a7e8a9b35d3
SSDEEP 49152:o6lTmCkQUfQ/7UypmkpG6D+SFdWl7SiuV/NZydHjtiOJAhyAaoXMJ:o6SCkQU4/7Nmkp5D+SFglq/NZyJRiiAt
TLSH
T101A57EE175809077D6230E31A99DA338A2E4BD730F7541D363D86E2F39B54D2A638E63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2892	2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe
2892	2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe
2892	2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe
2892	2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_8e90c8d712a756cacd74e854599294a3_elex_icedid_maze_stealc.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:2892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads