2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar

General

Target
2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar
Size 2.4MB
Sample261104-vtmpyas1gv
SHA256 a7224e5c7fd749e3bf45d7065e78d5711753394174f4f4c992479a23092d0fac
MD5 708f3c2302230d7734f27ff8118b040e
SHA1 d3bc91a7437c250cd2c643206d90fd1fd0ef3918
SHA512 87a2dd6cd2d21caf4082ce3ee011935c8f7171be3da3aa28123fa6147f7c39888ebf2b1b053538ed373531fc5c23b366933e4bf9b6891e09090590b9026c3325
SSDEEP 49152:eZ8y6BYj4Qa2F6lWbBeWcpv68NeBtANFuco8QY:sjsA6l6Jcpv9N3o8
TLSH
T133B5128BF69511F8F2578438826AE623E77FF85D4320566E1B8482445FA7AC16E3FF10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar

File Explorer

2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar

.exe 2.4MB

2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar

IMPHASH c0a8a2bae1b83aaaeca742713f7f9bf9
SHA256 a7224e5c7fd749e3bf45d7065e78d5711753394174f4f4c992479a23092d0fac
MD5 708f3c2302230d7734f27ff8118b040e
SHA1 d3bc91a7437c250cd2c643206d90fd1fd0ef3918
SHA512 87a2dd6cd2d21caf4082ce3ee011935c8f7171be3da3aa28123fa6147f7c39888ebf2b1b053538ed373531fc5c23b366933e4bf9b6891e09090590b9026c3325
SSDEEP 49152:eZ8y6BYj4Qa2F6lWbBeWcpv68NeBtANFuco8QY:sjsA6l6Jcpv9N3o8
TLSH
T133B5128BF69511F8F2578438826AE623E77FF85D4320566E1B8482445FA7AC16E3FF10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

276756

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WaitForSingleObject SetEvent CloseHandle UnmapViewOfFile CreateFileA GetModuleFileNameA WriteConsoleA GetStdHandle DeleteCriticalSection VirtualFree HeapFree SetThreadPriority CreateThread LeaveCriticalSection EnterCriticalSection CreateEventA HeapAlloc GetProcessHeap VirtualAlloc InitializeCriticalSection GetPrivateProfileStringA ReadFile GetSystemInfo WriteFile WaitForMultipleObjects HeapReAlloc DeleteFileA GlobalMemoryStatus GlobalMemoryStatusEx CreateFileMappingA MapViewOfFile OpenFileMappingA OpenEventA SetEndOfFile HeapSize CreateFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW FormatMessageA LoadLibraryA GetThreadLocale LoadLibraryExA GetProcAddress GetModuleHandleExA GetEnvironmentVariableA RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException MultiByteToWideChar WideCharToMultiByte GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP SetFilePointerEx GetFileType GetConsoleCP GetConsoleMode FlushFileBuffers ReadConsoleW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CompareStringW LCMapStringW SetStdHandle GetStringTypeW WriteConsoleW

user32

MessageBoxA

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_708f3c2302230d7734f27ff8118b040e_icedid_vidar

kernel32

user32

generic