Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
29/05/2026, 22:31
General
- Target 2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe
- Size 109KB
- Sample260529-2ftdwsdt4p
- SHA256 f89e98e8adfd1c573d9b62ac21d1bf134fcc7f61b0c7ae61bb66e2faa790d733
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
redirect.png
memory/4548-25-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-9-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-13-0x00007FFF25BE0000-0x00007FFF25BE2000-memory.dmp
memory/4548-15-0x00007FFF257B0000-0x00007FFF257B2000-memory.dmp
memory/4548-20-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-16-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-17-0x0000000140102000-0x000000014093C000-memory.dmp
memory/4548-12-0x00007FFF25AA0000-0x00007FFF25AA2000-memory.dmp
memory/4548-11-0x00007FFF279C0000-0x00007FFF279C2000-memory.dmp
memory/4548-10-0x00007FFF279B0000-0x00007FFF279B2000-memory.dmp
memory/4548-23-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-0-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-14-0x00007FFF257A0000-0x00007FFF257A2000-memory.dmp
memory/4548-29-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-28-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-32-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-30-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-31-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-26-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-24-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-22-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-21-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-27-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4548-45-0x0000019984840000-0x00000199848A0000-memory.dmp
memory/4548-44-0x0000019984760000-0x0000019984809000-memory.dmp
memory/4548-46-0x0000000140102000-0x000000014093C000-memory.dmp