General
- Target 2026-11-13_a853764d4dcc4ff08c11f87ac165eb19_icedid
- Size 1.5MB
- Sample261114-hx6wrset2t
- SHA256 fa3a5aa1c66ea6e2143225ef50968c6a89246515df77e85ecbf8839ca44adf27
- MD5 a853764d4dcc4ff08c11f87ac165eb19
- SHA1 4c30eff0e442dcca3e6f931b4ce34d29271b6ece
- SHA512 f31888039e0b0d9f29b7cfcc7b031f48dae36985172b17343386b6deeb9546016e6802bbd6adcc57557e258fa6272911e419c85218f658a4f9a7eac470633292
- SSDEEP 24576:WoUt7lN9yNlkJoxWnHUskJoxWnHU1kJoxWnHU:WoUt7lulMNM8M
- TLSH T18F65D001EF857FA9D07ACC7C86758563AD727C8A0B21E8EF12C072551E766E72A39F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-13_a853764d4dcc4ff08c11f87ac165eb19_icedid.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-13_a853764d4dcc4ff08c11f87ac165eb19_icedid.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-13_a853764d4dcc4ff08c11f87ac165eb19_icedid
- Size 1.5MB
- SHA256 fa3a5aa1c66ea6e2143225ef50968c6a89246515df77e85ecbf8839ca44adf27
- MD5 a853764d4dcc4ff08c11f87ac165eb19
- SHA1 4c30eff0e442dcca3e6f931b4ce34d29271b6ece
- SHA512 f31888039e0b0d9f29b7cfcc7b031f48dae36985172b17343386b6deeb9546016e6802bbd6adcc57557e258fa6272911e419c85218f658a4f9a7eac470633292
- SSDEEP 24576:WoUt7lN9yNlkJoxWnHUskJoxWnHU1kJoxWnHU:WoUt7lulMNM8M
- TLSH T18F65D001EF857FA9D07ACC7C86758563AD727C8A0B21E8EF12C072551E766E72A39F10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Suspicious use of SetThreadContext