2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid

General

Target
2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid
Size 2.0MB
Sample260923-ea9scss17m
SHA256 9978035dc965301287c08e4d55f345bca2bfda901e5414459e9f234c90680761
MD5 0d15c69bb5677b55db196ba0803314bf
SHA1 7a5b7349665aee8a40e27af90f25ab0474760572
SHA512 14ef3da904db268c3cec88ee80b699d7779f39f269b60ddbe364b84931552b629de5363ed117f9b4f3f63c2c48efd88897b31956f06da8af7b506166e135c69e
SSDEEP 49152:jX1I8gjiNu07nI+LUDBgT1G6FPU165mvQgK:jFZDNLEgTId6EvQF
TLSH
T11D95238776A074F5F87A4A789EC24A819776387247A08BEF16A052911F972C74C3FF12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid

File Explorer

2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid

.exe .js 2.0MB

2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid

IMPHASH f9e9a37095319e4a3530c2a654b7183c
SHA256 9978035dc965301287c08e4d55f345bca2bfda901e5414459e9f234c90680761
MD5 0d15c69bb5677b55db196ba0803314bf
SHA1 7a5b7349665aee8a40e27af90f25ab0474760572
SHA512 14ef3da904db268c3cec88ee80b699d7779f39f269b60ddbe364b84931552b629de5363ed117f9b4f3f63c2c48efd88897b31956f06da8af7b506166e135c69e
SSDEEP 49152:jX1I8gjiNu07nI+LUDBgT1G6FPU165mvQgK:jFZDNLEgTId6EvQF
TLSH
T11D95238776A074F5F87A4A789EC24A819776387247A08BEF16A052911F972C74C3FF12
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW DeleteFileW GetFileSize ReadFile SetFilePointer WriteFile GetTempPathW CloseHandle WaitForSingleObject GetCurrentProcess GetExitCodeProcess CreateProcessW FlushInstructionCache VirtualAlloc VirtualProtect VirtualFree GetModuleFileNameW GetProcAddress LoadLibraryA LoadLibraryW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx LCMapStringW GetProcessHeap

bcrypt

BCryptDestroyKey BCryptCloseAlgorithmProvider BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptDecrypt

user32

wsprintfA

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-22_0d15c69bb5677b55db196ba0803314bf_icedid

kernel32

bcrypt

user32

generic