Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
29/05/2026, 11:00
General
- Target 2026-05-29_f1b58e7392bca9eb4e934e1377bad660_cobalt-strike_icedid.exe
- Size 109KB
- Sample260529-m366yahz3m
- SHA256 d7c69bc07ad45b928f3f18ad206838cfe8bfb611d948ca9a23a46838880bf96a
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-29_f1b58e7392bca9eb4e934e1377bad660_cobalt-strike_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-29_f1b58e7392bca9eb4e934e1377bad660_cobalt-strike_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
redirect.png
memory/4964-25-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-32-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-16-0x00007FF8850B0000-0x00007FF8850B2000-memory.dmp
memory/4964-15-0x00007FF8850A0000-0x00007FF8850A2000-memory.dmp
memory/4964-13-0x00007FF886230000-0x00007FF886232000-memory.dmp
memory/4964-12-0x00007FF886220000-0x00007FF886222000-memory.dmp
memory/4964-11-0x00007FF887860000-0x00007FF887862000-memory.dmp
memory/4964-10-0x00007FF887850000-0x00007FF887852000-memory.dmp
memory/4964-23-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-20-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-21-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-0-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-14-0x0000000140102000-0x000000014093C000-memory.dmp
memory/4964-22-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-17-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-26-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-28-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-27-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-31-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-29-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-30-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-24-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-9-0x0000000140000000-0x0000000141644000-memory.dmp
memory/4964-46-0x0000023621480000-0x00000236214E7000-memory.dmp
memory/4964-47-0x0000000140102000-0x000000014093C000-memory.dmp