General
- Target 2026-06-28_c90bebfe93819fa48c5c22816b93f3fc_cobalt-strike_icedid
- Size 345KB
- Sample260628-xtjpdscz2k
- SHA256 16ea6f12edef24ae9d426ba2db430c385478accfe1cb0b7f2dbc7c408bd67e77
- MD5 c90bebfe93819fa48c5c22816b93f3fc
- SHA1 13212bbcb36fedb075dfddcea83d4df64d592558
- SHA512 88fcb849380a5e49a5cba6e3dd1af34e9a42d4696db7dacc123fc2f7c5d05a6437dbff24300329233102ad11e7cd3dcce13eab97f0567e27920abd877ead52ce
- SSDEEP 6144:oqUx/aTms24LJPA+AqktyZyg48WtaqbMtXNcPdlrHqfY8e2JLLCivnPTQ7gYPd/8:oqcs2wu+AqRZyg4gqM1Kl4Ne2JxLQ7gt
- TLSH T175746B4E869320F0D5F66C7990167000872D7F560B5867EB16DEB139AE3FFA14C3EA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_c90bebfe93819fa48c5c22816b93f3fc_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_c90bebfe93819fa48c5c22816b93f3fc_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_c90bebfe93819fa48c5c22816b93f3fc_cobalt-strike_icedid
- Size 345KB
- SHA256 16ea6f12edef24ae9d426ba2db430c385478accfe1cb0b7f2dbc7c408bd67e77
- MD5 c90bebfe93819fa48c5c22816b93f3fc
- SHA1 13212bbcb36fedb075dfddcea83d4df64d592558
- SHA512 88fcb849380a5e49a5cba6e3dd1af34e9a42d4696db7dacc123fc2f7c5d05a6437dbff24300329233102ad11e7cd3dcce13eab97f0567e27920abd877ead52ce
- SSDEEP 6144:oqUx/aTms24LJPA+AqktyZyg48WtaqbMtXNcPdlrHqfY8e2JLLCivnPTQ7gYPd/8:oqcs2wu+AqRZyg4gqM1Kl4Ne2JxLQ7gt
- TLSH T175746B4E869320F0D5F66C7990167000872D7F560B5867EB16DEB139AE3FFA14C3EA29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled