Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
- submitted
30/05/2026, 22:27
General
- Target 2026-05-30_837231208977f9f44b800d0eb7a2c497_cobalt-strike_icedid.exe
- Size 109KB
- Sample260530-2dhjlset2x
- SHA256 a8e2628ed365f640722d49ca8b0d94fec630bf67269825f2827f454e671f7f69
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 6 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-30_837231208977f9f44b800d0eb7a2c497_cobalt-strike_icedid.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-30_837231208977f9f44b800d0eb7a2c497_cobalt-strike_icedid.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
redirect.png
memory/2036-23-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-28-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-13-0x0000000140102000-0x000000014093C000-memory.dmp
memory/2036-12-0x00007FF8DC3B0000-0x00007FF8DC3B2000-memory.dmp
memory/2036-14-0x00007FF8DC3C0000-0x00007FF8DC3C2000-memory.dmp
memory/2036-16-0x00007FF8DB860000-0x00007FF8DB862000-memory.dmp
memory/2036-15-0x00007FF8DB850000-0x00007FF8DB852000-memory.dmp
memory/2036-11-0x00007FF8DDC40000-0x00007FF8DDC42000-memory.dmp
memory/2036-20-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-19-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-22-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-0-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-10-0x00007FF8DDC30000-0x00007FF8DDC32000-memory.dmp
memory/2036-30-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-21-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-26-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-25-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-27-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-32-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-29-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-31-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-24-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-9-0x0000000140000000-0x0000000141644000-memory.dmp
memory/2036-46-0x000002E220580000-0x000002E2205E7000-memory.dmp
memory/2036-48-0x0000000140102000-0x000000014093C000-memory.dmp