Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations and research history in one connected catalog.

122,630Catalog records

55,535File records

136,997Source observations

123Family labels

SearchRecord typeSourceSeen / collected sinceMinimum source confidenceClear filters

1 MATCHING RECORDS

Export metadata JSON · CSV

REFERENCE1 SOURCE

IcedID

Malware galaxy based on Malpedia archive. | Analysis Observations: * It sets up persistence by creating a Scheduled Task with the following characteristics: * Name: Update * Trigger: At Log on * Action: %LocalAppData%\$Example\\waroupada.exe /i * Conditions: Stop if the computer ceases to be idle. * The sub-directory within %LocalAppdata%, Appears to be randomly picked from the list of directories

misp:galaxy-name="Malpedia"misp:galaxy-type="malpedia"misp-galaxy:malpedia="IcedID"

First reported 2025-07-31 15:54 UTCOpen evidence record

Source labels and confidence are preserved. A filename or report mention alone does not establish that a file is malicious. Indicator observation dates describe the cited source; collection dates describe this catalog.