General
- Target 2026-10-28_9b81d86cf723654af497ba687edcf7b0_icedid
- Size 10.2MB
- Sample261029-2phzhstvdw
- SHA256 aca3b17ad65e58e4f813c511650dfdfbf61d67a634c49bef0c885eb84126da8b
- MD5 9b81d86cf723654af497ba687edcf7b0
- SHA1 b1a276e7a4836cd4a3b965f0d2df784a76573437
- SHA512 6640c59faf845d21477440755961d44c9af227a8a240cd338b9d46482db648c3e0124343475c4e001d113b634fbe5874df68edf1806fea802c74332db21ddc99
- SSDEEP 98304:m6Hir8DdYkutMue/JpoG2Fet5koKwKEAz6oy7dtPbCWAsfZuUBborQROr:m6y85Vukpo/FetGo5KEDp5ykZ9BMrME
- TLSH T170B67D433693EC47964B3856C06FEC711D2C9CAA088EEA7AC43DE2DF9D9A1532C27571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_9b81d86cf723654af497ba687edcf7b0_icedid.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_9b81d86cf723654af497ba687edcf7b0_icedid.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_9b81d86cf723654af497ba687edcf7b0_icedid
- Size 10.2MB
- SHA256 aca3b17ad65e58e4f813c511650dfdfbf61d67a634c49bef0c885eb84126da8b
- MD5 9b81d86cf723654af497ba687edcf7b0
- SHA1 b1a276e7a4836cd4a3b965f0d2df784a76573437
- SHA512 6640c59faf845d21477440755961d44c9af227a8a240cd338b9d46482db648c3e0124343475c4e001d113b634fbe5874df68edf1806fea802c74332db21ddc99
- SSDEEP 98304:m6Hir8DdYkutMue/JpoG2Fet5koKwKEAz6oy7dtPbCWAsfZuUBborQROr:m6y85Vukpo/FetGo5KEDp5ykZ9BMrME
- TLSH T170B67D433693EC47964B3856C06FEC711D2C9CAA088EEA7AC43DE2DF9D9A1532C27571
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Detects executables referencing many IR and analysis tools
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext