2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc

General

Target
2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc
Size 2.8MB
Sample261102-w3dn3aew6j
SHA256 b4feb38755a2692255e83e16a5717d0e766e63691e15a7e9c9ba55701a4e5804
MD5 f252dd18ace7181759b9b58b864d291d
SHA1 2a141d3f5fcdfd4e22008750ec6735eeed1f3a3e
SHA512 67c92b66f198a31583e3c12656308804a3182db94498dc71ba33bb3096bf432c4057c70b4e8cbc3d0407a345310dfb98adccf2d7d747cc66b56124178a8f1026
SSDEEP 49152:uJ1wvcpMQH7L4JnypT9MOuOWz9QGLUg/oACeh8U7sFEGdlBe2Hj+5:2KvkNL4JypRwhz93LxFdT7TZ8j+5
TLSH
T101D5339353E0B0EAD9678875CE429816DB30B4768700DEDB4770955E2E23EA1CF3DB26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc

File Explorer

2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc

.exe 2.8MB

2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc

IMPHASH 4342bcabca15051a70e4126d6f657b46
SHA256 b4feb38755a2692255e83e16a5717d0e766e63691e15a7e9c9ba55701a4e5804
MD5 f252dd18ace7181759b9b58b864d291d
SHA1 2a141d3f5fcdfd4e22008750ec6735eeed1f3a3e
SHA512 67c92b66f198a31583e3c12656308804a3182db94498dc71ba33bb3096bf432c4057c70b4e8cbc3d0407a345310dfb98adccf2d7d747cc66b56124178a8f1026
SSDEEP 49152:uJ1wvcpMQH7L4JnypT9MOuOWz9QGLUg/oACeh8U7sFEGdlBe2Hj+5:2KvkNL4JypRwhz93LxFdT7TZ8j+5
TLSH
T101D5339353E0B0EAD9678875CE429816DB30B4768700DEDB4770955E2E23EA1CF3DB26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetTickCount64 WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap LCMapStringW GetTickCount InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle GetSystemInfo GlobalMemoryStatusEx Sleep IsDebuggerPresent QueryPerformanceCounter VirtualProtect VirtualFree GetCurrentProcess VirtualAlloc TerminateProcess GetLastError LoadLibraryA CloseHandle GetProcAddress ExitProcess GetModuleHandleW FlushInstructionCache ReadFile GetFileSizeEx WriteFile GetModuleFileNameW CreateFileW MultiByteToWideChar WideCharToMultiByte GetSystemTimeAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetStartupInfoW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-02_f252dd18ace7181759b9b58b864d291d_icedid_stealc

kernel32

generic