General
- Target 2026-06-25_336e95b5a7dd2b2b4146cd28a81b2c7c_cobalt-strike_icedid_stealc
- Size 150KB
- Sample260629-27fl4shv7w
- SHA256 0d6b2a69362d04fb55f02a378e056b8fe914c87536c968395c309779d733e326
- MD5 336e95b5a7dd2b2b4146cd28a81b2c7c
- SHA1 9e47ec4460fb1a8aeb413215f9ba535c75ea3ce8
- SHA512 de80d71fb1b873ee678399c529480d3dc155cdddc770c450c20f0bdab51b8978b106131bae694c33182734604e45f1879ff57584336f0779c2e4988ec31df26b
- SSDEEP 3072:VUFy0RluDXIVfJQ5DvgJi7xnODsFMgctq4xC:KF9RcDCBQ5sMBneC
- TLSH T1F7E36D1BF76570FAE2A78938C8420905EB727C764BA0ABDF47910EB50E276D09E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-25_336e95b5a7dd2b2b4146cd28a81b2c7c_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_336e95b5a7dd2b2b4146cd28a81b2c7c_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_336e95b5a7dd2b2b4146cd28a81b2c7c_cobalt-strike_icedid_stealc
- Size 150KB
- SHA256 0d6b2a69362d04fb55f02a378e056b8fe914c87536c968395c309779d733e326
- MD5 336e95b5a7dd2b2b4146cd28a81b2c7c
- SHA1 9e47ec4460fb1a8aeb413215f9ba535c75ea3ce8
- SHA512 de80d71fb1b873ee678399c529480d3dc155cdddc770c450c20f0bdab51b8978b106131bae694c33182734604e45f1879ff57584336f0779c2e4988ec31df26b
- SSDEEP 3072:VUFy0RluDXIVfJQ5DvgJi7xnODsFMgctq4xC:KF9RcDCBQ5sMBneC
- TLSH T1F7E36D1BF76570FAE2A78938C8420905EB727C764BA0ABDF47910EB50E276D09E3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.