2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc
Size 4.4MB
Sample261003-pl5b5ada98
SHA256 e49673e67ac4378ba0b8e300490bd59806e2298f8148386967af646bad3eb677
MD5 55c66c206a486c839c9b1b8647bdab89
SHA1 6cfa90e64e8125f1fd918734e19383313a556901
SHA512 28008130a6455c1a42925e6769db7166c1267a0bb37c20af84739a85573cf59b260b9e021fc312ff2050482703c0615fa14ea343bf17ed694588c9c553dde8ce
SSDEEP 98304:A28pstQ4wtTzwRg69VbelUngT0K4DZzSNbDGzzARvBHJ:F8WHm3w9VbSUgT0hZzSNbCAlB
TLSH
T1EA2612CDAA8413B1D3A4F5724862CB55C6736B8EC77473CBDE1405DBCA2B993492F282
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc

File Explorer

2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc

.exe 4.4MB

2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc

IMPHASH 82e90656027f79ca838c0ccbeb06de44
SHA256 e49673e67ac4378ba0b8e300490bd59806e2298f8148386967af646bad3eb677
MD5 55c66c206a486c839c9b1b8647bdab89
SHA1 6cfa90e64e8125f1fd918734e19383313a556901
SHA512 28008130a6455c1a42925e6769db7166c1267a0bb37c20af84739a85573cf59b260b9e021fc312ff2050482703c0615fa14ea343bf17ed694588c9c553dde8ce
SSDEEP 98304:A28pstQ4wtTzwRg69VbelUngT0K4DZzSNbDGzzARvBHJ:F8WHm3w9VbSUgT0hZzSNbCAlB
TLSH
T1EA2612CDAA8413B1D3A4F5724862CB55C6736B8EC77473CBDE1405DBCA2B993492F282
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4268284

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ord680 ShellExecuteExA

kernel32

FreeLibrary WriteConsoleW CreateFileW IsDebuggerPresent RaiseException AddVectoredExceptionHandler Sleep GetCurrentProcess ExitProcess CreateThread GetCurrentThread GetThreadContext VirtualAlloc VirtualFree GetWriteWatch GetModuleFileNameA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW HeapSize RtlPcToFileHeader RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap

Name

.ledas

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

148KB

Virtual Size

148KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

204KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

472B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-02_55c66c206a486c839c9b1b8647bdab89_icedid_stealc

shell32

kernel32

generic