General
- Target 2026-07-02_51026b488cf83c7e9b1fa7a0daacda91_cobalt-strike_hijackloader_icedid
- Size 574KB
- Sample260702-zhtrbsew2s
- SHA256 b73c96dbf843dd433f6f96888c4941ec1644915d0f4b27b2c638f36c41d5def7
- MD5 51026b488cf83c7e9b1fa7a0daacda91
- SHA1 27fc63897b23c79e31354b0f8dd9a4dbb07755ad
- SHA512 1add3c057062548f2008d22ea8ac721458db34faf5746a7a25f2bc62fe878f582be0ed93456b1c0c3c645148fa5130a13296c5f9f485306926b70d93fbb2ba2f
- SSDEEP 6144:ow/VUkd1s9/5p3UCFvYKGD6CXgohVIIciY4VWKoKPRqXCPbEeaFkrVFaTloXCvc:71d1s9/5pkCeDZwoTxjRqXCPvyz0C0
- TLSH T10CC41679E6B844C4E6BAB4388663855AD222FC09435196CF79687F063F377D0FA7A304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_51026b488cf83c7e9b1fa7a0daacda91_cobalt-strike_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_51026b488cf83c7e9b1fa7a0daacda91_cobalt-strike_hijackloader_icedid.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_51026b488cf83c7e9b1fa7a0daacda91_cobalt-strike_hijackloader_icedid
- Size 574KB
- SHA256 b73c96dbf843dd433f6f96888c4941ec1644915d0f4b27b2c638f36c41d5def7
- MD5 51026b488cf83c7e9b1fa7a0daacda91
- SHA1 27fc63897b23c79e31354b0f8dd9a4dbb07755ad
- SHA512 1add3c057062548f2008d22ea8ac721458db34faf5746a7a25f2bc62fe878f582be0ed93456b1c0c3c645148fa5130a13296c5f9f485306926b70d93fbb2ba2f
- SSDEEP 6144:ow/VUkd1s9/5p3UCFvYKGD6CXgohVIIciY4VWKoKPRqXCPbEeaFkrVFaTloXCvc:71d1s9/5pkCeDZwoTxjRqXCPvyz0C0
- TLSH T10CC41679E6B844C4E6BAB4388663855AD222FC09435196CF79687F063F377D0FA7A304
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.