Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
29/05/2026, 22:31
General
- Target 2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe
- Size 109KB
- Sample260529-2ftdwsdt4p
- SHA256 f89e98e8adfd1c573d9b62ac21d1bf134fcc7f61b0c7ae61bb66e2faa790d733
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-29_495d14c9621be22b1c3681f7e6f6b373_cobalt-strike_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
redirect.png
memory/3124-24-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-33-0x000001E1270C0000-0x000001E12711D000-memory.dmp
memory/3124-10-0x00007FFE48F70000-0x00007FFE48F72000-memory.dmp
memory/3124-15-0x00007FFE469B0000-0x00007FFE469B2000-memory.dmp
memory/3124-13-0x0000000140102000-0x000000014093C000-memory.dmp
memory/3124-12-0x00007FFE488C0000-0x00007FFE488C2000-memory.dmp
memory/3124-14-0x00007FFE488D0000-0x00007FFE488D2000-memory.dmp
memory/3124-22-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-20-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-18-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-16-0x00007FFE469C0000-0x00007FFE469C2000-memory.dmp
memory/3124-0-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-11-0x00007FFE48F80000-0x00007FFE48F82000-memory.dmp
memory/3124-30-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-29-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-27-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-26-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-28-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-31-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-25-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-23-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-21-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-32-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-36-0x0000000140102000-0x000000014093C000-memory.dmp
memory/3124-9-0x0000000140000000-0x0000000141644000-memory.dmp
memory/3124-60-0x000001E12B880000-0x000001E12B8E7000-memory.dmp