Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/10/2026, 19:09
General
- Target 2026-10-01_18fd340000db72b6439923925e69d29f_icedid_vidar.exe
- Size 861KB
- Sample261002-xt4dssgb85
- SHA256 8d2ad6a8e378b4e9998ea58b154ee4b8707cac5c084876db064d5c1398da75e9
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 3 IoCs
- UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Drops file in Program Files directory 1 IoCs
- Drops file in Windows directory 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-01_18fd340000db72b6439923925e69d29f_icedid_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-01_18fd340000db72b6439923925e69d29f_icedid_vidar.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2748-0-0x00007FF6E8EB0000-0x00007FF6E8FC5000-memory.dmp
memory/2748-3-0x00000278F24C0000-0x00000278F2544000-memory.dmp
memory/2748-2-0x00000278F24C0000-0x00000278F2544000-memory.dmp
memory/2748-1-0x00000278F24C0000-0x00000278F2544000-memory.dmp
memory/2748-9-0x00000278F24C0000-0x00000278F2544000-memory.dmp
memory/2748-12-0x00007FF6E8EB0000-0x00007FF6E8FC5000-memory.dmp