2026-09-21_74083b6e59e869a3286db05e36eff434_icedid

General

Target
2026-09-21_74083b6e59e869a3286db05e36eff434_icedid
Size 2.6MB
Sample260922-pkr1eaec33
SHA256 745910a10245ec6783c9439a85eb74dfda96f56844eb0ac7a324265b502ce7a9
MD5 74083b6e59e869a3286db05e36eff434
SHA1 1ff8d7aa8476231a7f8e0d2a66972338600fee8a
SHA512 29b5e31d2a85ae6f043040518dcf2b1a0b2f29f7fd5a09770ab1c733aea534b4872d9bbdb8d5bbefb5f5f813a49388bf7af6e6c191c0497efd8811c16dcffb1d
SSDEEP 24576:13jOo5XarYmjMl9iCzQ3TJFFvz1LiufwK6zHycxP0QeDMsE:1zOaXwjMl9iX3Fr1Liu4LSqMQeDMs
TLSH
T1D8D56C3BDAAA86EDC955D435E5A19B3260303C0D85329637E7822F241FB671CDEBD708
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_74083b6e59e869a3286db05e36eff434_icedid

File Explorer

2026-09-21_74083b6e59e869a3286db05e36eff434_icedid

.exe 2.6MB

2026-09-21_74083b6e59e869a3286db05e36eff434_icedid

IMPHASH a46cc72b550adb245047c9a14f95beb2
SHA256 745910a10245ec6783c9439a85eb74dfda96f56844eb0ac7a324265b502ce7a9
MD5 74083b6e59e869a3286db05e36eff434
SHA1 1ff8d7aa8476231a7f8e0d2a66972338600fee8a
SHA512 29b5e31d2a85ae6f043040518dcf2b1a0b2f29f7fd5a09770ab1c733aea534b4872d9bbdb8d5bbefb5f5f813a49388bf7af6e6c191c0497efd8811c16dcffb1d
SSDEEP 24576:13jOo5XarYmjMl9iCzQ3TJFFvz1LiufwK6zHycxP0QeDMsE:1zOaXwjMl9iX3Fr1Liu4LSqMQeDMs
TLSH
T1D8D56C3BDAAA86EDC955D435E5A19B3260303C0D85329637E7822F241FB671CDEBD708
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle ContinueDebugEvent CreateEventW CreateFileMappingW CreateFileW DeleteCriticalSection DeleteProcThreadAttributeList DeviceIoControl EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceExW GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExW LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UpdateProcThreadAttribute WaitForDebugEvent WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile lstrcatW lstrcmpiW lstrcpyW

ole32

CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoUninitialize

oleaut32

SysAllocString SysFreeString VariantClear VariantInit

d3d11

D3D11CreateDevice

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_74083b6e59e869a3286db05e36eff434_icedid

kernel32

ole32

oleaut32

d3d11

generic