2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc
Size 7.0MB
Sample260915-gpfh6sdg96
SHA256 56f6e0e3cf9d5efb9f3cc7e006cdd0f579d4cef8c11bd1b92072ba9a3641514b
MD5 103f6e8f98c2c558c9c08f201e2090cc
SHA1 54a14e5fc7462f078a131fc3fa81daf2cbd18af8
SHA512 fee23c00aaf7ae84e47eec509e5b67f3b68921aed03fbb3eee24c3f428bed95ca7c9c0a2e03f156ac9a0726acbb7112c09358377f83c82f9e194349be177a853
SSDEEP 196608:S7vDYq8tebbQd7/BI6T9P2BNX5fvgVdvW1ZAWDq:SXYq8tgu//hPmR5XgPW1BD
TLSH
T14F76334996C12AB4D211833C9A96F232D9777C688BF19EC717C18F5F3E236D48E38A54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc

File Explorer

2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc

.exe 7.0MB

2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc

IMPHASH 35d19c2d5fd61318bb6ab0d5ea95a160
SHA256 56f6e0e3cf9d5efb9f3cc7e006cdd0f579d4cef8c11bd1b92072ba9a3641514b
MD5 103f6e8f98c2c558c9c08f201e2090cc
SHA1 54a14e5fc7462f078a131fc3fa81daf2cbd18af8
SHA512 fee23c00aaf7ae84e47eec509e5b67f3b68921aed03fbb3eee24c3f428bed95ca7c9c0a2e03f156ac9a0726acbb7112c09358377f83c82f9e194349be177a853
SSDEEP 196608:S7vDYq8tebbQd7/BI6T9P2BNX5fvgVdvW1ZAWDq:SXYq8tgu//hPmR5XgPW1BD
TLSH
T14F76334996C12AB4D211833C9A96F232D9777C688BF19EC717C18F5F3E236D48E38A54
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

GetUserNameW

bcrypt

BCryptCloseAlgorithmProvider BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptDestroyKey BCryptDecrypt BCryptGetProperty

user32

wsprintfW

ole32

CoInitializeEx CoUninitialize CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantClear VariantInit

shell32

SHGetFolderPathW

kernel32

WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetEnvironmentVariableW ExpandEnvironmentStringsW CreateFileW SetFileTime WriteFile GetTempPathW CloseHandle GetLastError CreateMutexW CreateProcessW GetTickCount GetTickCount64 GetModuleFileNameW GetModuleHandleA GetProcAddress SwitchToFiber DeleteFiber ConvertFiberToThread CreateFiber ConvertThreadToFiber WideCharToMultiByte LocalFree RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW

Name

.rbcsif

Size

87KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.58z

Size

6.8MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.nay9y9

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c3c

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.5z3z

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.m2p

Size

67KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.zkvae

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-15_103f6e8f98c2c558c9c08f201e2090cc_icedid_stealc

advapi32

bcrypt

user32

ole32

oleaut32

shell32

kernel32

generic