2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc

General

Target
2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc
Size 13.0MB
Sample261110-qea1datwft
SHA256 cffba99a895636e81fe69d3e0b31d7dc5ccc3a912141647c39f4f4bdb9e58c63
MD5 8cc35912484946a35ef164ef957c3c30
SHA1 f8d9651aeb3f4fd7b6f72c59945c23f2fb406289
SHA512 685d4f39a4d2144abc8f6a6969e2976c3a0c0dafd041917524a59a3c122d0a12aae5862e2f2b2437e7377a9a5352b00fb82160a45ba7f7a1abd834b420256642
SSDEEP 393216:EDDVPPLqIGxPoBX4JRYyMdUv+7iaWuEwgf:4PPgxKkRYyMa+7izV
TLSH
T1A7D63397BF5278A4D358613255622095AF1771BA3BB89FB717E7A3C20D81448EC23F23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc

File Explorer

2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc

.exe 13.0MB

2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc

IMPHASH 9e3c082a3b6506fd721c3f86ccef73e5
SHA256 cffba99a895636e81fe69d3e0b31d7dc5ccc3a912141647c39f4f4bdb9e58c63
MD5 8cc35912484946a35ef164ef957c3c30
SHA1 f8d9651aeb3f4fd7b6f72c59945c23f2fb406289
SHA512 685d4f39a4d2144abc8f6a6969e2976c3a0c0dafd041917524a59a3c122d0a12aae5862e2f2b2437e7377a9a5352b00fb82160a45ba7f7a1abd834b420256642
SSDEEP 393216:EDDVPPLqIGxPoBX4JRYyMdUv+7iaWuEwgf:4PPgxKkRYyMa+7izV
TLSH
T1A7D63397BF5278A4D358613255622095AF1771BA3BB89FB717E7A3C20D81448EC23F23
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

user32

MessageBoxW

kernel32

DeleteCriticalSection WriteConsoleW SetFilePointerEx GetCommandLineW CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW RemoveDirectoryW SetFileAttributesW WriteFile CloseHandle ReleaseMutex WaitForSingleObject CreateMutexW GetExitCodeProcess CreateProcessW GetSystemDirectoryW GetModuleFileNameW LoadResource LockResource SizeofResource SetDefaultDllDirectories FindResourceW SetDllDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetConsoleMode RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

24.1MB

Virtual Size

24.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-09_8cc35912484946a35ef164ef957c3c30_icedid_stealc

shell32

ole32

user32

kernel32

generic