Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target 2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe
- Size 1.5MB
- Sample261009-vbvb3ass6l
- SHA256 38941f28ecf06ef2d4d2c1187e929a36c4e2dbec7fd06e713f0309675cea3384
- MD5 3c5a16ff70a07137dc093cb01a2ef5bf
- SHA1 0d3c32c37b2450cc920ce92abef0f95fbc6efb4e
- SHA512 b844790ec3182b487712afd9baa560bc9f765ff0a09555c07123d5ae0f7a8180eca569a93e328c730ee545cd623d46ba45ba9c409b5e69ad822e5b23a6fc1637
- SSDEEP 12288:fIAHMFWZSbUIBS4fPt6tpm+OXhWS6rVoVlK5KZmK+S4zpMqoSjwgAy:fHeWwNSiGpxAoYmK9jSjwp
- TLSH T178750117B3AA21FDE2778570C8424901EB317CA55B709AEF13505AB69E33BE09D3DB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 3 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe File opened for modification C:\Windows\system32\AppVClient.exe 2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe File opened for modification C:\Windows\system32\dllhost.exe 2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe - Suspicious behavior: LoadsDriver 2 IoCs
pid Process 816 Process not Found 816 Process not Found - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 5232 2026-10-08_3c5a16ff70a07137dc093cb01a2ef5bf_icedid_stealc.exe