General
- Target 2026-06-28_e4b9753fc9b4622db997e6ef88a0b952_cobalt-strike_icedid
- Size 106KB
- Sample260628-wzzgcsbz2l
- SHA256 46b4c0e38b93932c3994beea6eb3d6bf2d89709756bec1d6132e8a5369b5f82d
- MD5 e4b9753fc9b4622db997e6ef88a0b952
- SHA1 b85d72bd5cd58de617e85684a7bedcd18a06dd33
- SHA512 3c2f8cf900132d03ba8232cd3895cd890a9009b9c1606de52678283b4cd3f9a3bc15551bda93554b3f63af3d77ef19d8344afe43cd17355752ebce73e78d7690
- SSDEEP 1536:hnjf4ujMHjYWQ0s8oWptBTSiFgDTH3CSoxVo1I0Fh5nIpe3kzsW0de9dllmnHu:hnjgjMAxTSiCXSnxViIMP+eUgWTm
- TLSH T1D7B35B5BA3E930F8E0778678C4A50A45D776B87247609FEF07A4469A1F236D18D3EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e4b9753fc9b4622db997e6ef88a0b952_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e4b9753fc9b4622db997e6ef88a0b952_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e4b9753fc9b4622db997e6ef88a0b952_cobalt-strike_icedid
- Size 106KB
- SHA256 46b4c0e38b93932c3994beea6eb3d6bf2d89709756bec1d6132e8a5369b5f82d
- MD5 e4b9753fc9b4622db997e6ef88a0b952
- SHA1 b85d72bd5cd58de617e85684a7bedcd18a06dd33
- SHA512 3c2f8cf900132d03ba8232cd3895cd890a9009b9c1606de52678283b4cd3f9a3bc15551bda93554b3f63af3d77ef19d8344afe43cd17355752ebce73e78d7690
- SSDEEP 1536:hnjf4ujMHjYWQ0s8oWptBTSiFgDTH3CSoxVo1I0Fh5nIpe3kzsW0de9dllmnHu:hnjgjMAxTSiCXSnxViIMP+eUgWTm
- TLSH T1D7B35B5BA3E930F8E0778678C4A50A45D776B87247609FEF07A4469A1F236D18D3EF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.