2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid

General

Target
2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid
Size 229KB
Sample260629-pxd93sft2r
SHA256 27ae08cfa787f6af587d9c70fa3713af0bd24187a56935e113c45f78b67300e9
MD5 bee550aca018b94a2eab52d330025abc
SHA1 12a9bfa828c1bc0465e06691407113de889cd8db
SHA512 7c5c09bed1cbd47e33d65dbd17b420d7fd416f78975099e267d3c87ed8da494d1c5b44cfc6af86ca6781590d14e320a1bc21de8cbce743a11fb02c8551cc720b
SSDEEP 6144:SO/mXK944v8YU58mynxOI37deMUdLUAdVW:F/KKXv8YTmG97/BAXW
TLSH
T1AB34AEAB62E932EBF67A8634D21C17058775BC721F246BBF0E1941491E332E05E3AF15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid

File Explorer

2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid

.exe 229KB

2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid

IMPHASH 4271480ae035d5a295033630146a6a02
SHA256 27ae08cfa787f6af587d9c70fa3713af0bd24187a56935e113c45f78b67300e9
MD5 bee550aca018b94a2eab52d330025abc
SHA1 12a9bfa828c1bc0465e06691407113de889cd8db
SHA512 7c5c09bed1cbd47e33d65dbd17b420d7fd416f78975099e267d3c87ed8da494d1c5b44cfc6af86ca6781590d14e320a1bc21de8cbce743a11fb02c8551cc720b
SSDEEP 6144:SO/mXK944v8YU58mynxOI37deMUdLUAdVW:F/KKXv8YTmG97/BAXW
TLSH
T1AB34AEAB62E932EBF67A8634D21C17058775BC721F246BBF0E1941491E332E05E3AF15
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FreeLibrary LoadLibraryA WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx HeapSize HeapReAlloc CloseHandle CreateFileW

Name

.text

Size

58KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

121KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-26_bee550aca018b94a2eab52d330025abc_cobalt-strike_icedid

kernel32

generic