General
- Target 2026-10-19_36e35f57405377475cc126923031740c_icedid
- Size 8.6MB
- Sample261020-3f973sbs8q
- SHA256 cab3351599cd84fa5b60eebdd87e1f71a0e16f8e364f7f192395fce61e3b1f39
Score
10/10
Malware Config
Targets
-
- Target 2026-10-19_36e35f57405377475cc126923031740c_icedid
- Size 8.6MB
- SHA256 cab3351599cd84fa5b60eebdd87e1f71a0e16f8e364f7f192395fce61e3b1f39
Score10/10-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Windows security bypass
-
Executes dropped EXE
-
Loads dropped DLL
-
Windows security modification
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Access Token Manipulation
1Parent PID Spoofing
1Scheduled Task/Job
1Scheduled Task
1