General
- Target 2026-07-03_e132695ad2c73cba7bf8d43de8a8bae0_cobalt-strike_hijackloader_icedid
- Size 574KB
- Sample260703-q3rm2afs7p
- SHA256 94aa04e3e9393aab0a2028be3c0f76571d527bdf5a9da008a34fc44b68be113f
- MD5 e132695ad2c73cba7bf8d43de8a8bae0
- SHA1 880fa61adc72511849c849179b691b0f79155489
- SHA512 038c9bfe84a3d8fde276b2a147d2298b16ddf477e1fa0088d594a41a57f7efdb7f50b08c9b89616e003eddf8bd1c76e1454ccb9e5c3208fd4ad541fe764b1c0a
- SSDEEP 6144:XrcLanFs9IL7329F2afzKGJ8HXgohVIIciY4VWKZrmmw6pjYj1DW9RXmy1aq5:AOnFs9IL7Q2YJSwoTxZU6G1K9RXB4q5
- TLSH T17DC41779E6B844C4E2BAB53886638559D222FC09435196CF79687F463F737D0FABA300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_e132695ad2c73cba7bf8d43de8a8bae0_cobalt-strike_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_e132695ad2c73cba7bf8d43de8a8bae0_cobalt-strike_hijackloader_icedid.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_e132695ad2c73cba7bf8d43de8a8bae0_cobalt-strike_hijackloader_icedid
- Size 574KB
- SHA256 94aa04e3e9393aab0a2028be3c0f76571d527bdf5a9da008a34fc44b68be113f
- MD5 e132695ad2c73cba7bf8d43de8a8bae0
- SHA1 880fa61adc72511849c849179b691b0f79155489
- SHA512 038c9bfe84a3d8fde276b2a147d2298b16ddf477e1fa0088d594a41a57f7efdb7f50b08c9b89616e003eddf8bd1c76e1454ccb9e5c3208fd4ad541fe764b1c0a
- SSDEEP 6144:XrcLanFs9IL7329F2afzKGJ8HXgohVIIciY4VWKZrmmw6pjYj1DW9RXmy1aq5:AOnFs9IL7Q2YJSwoTxZU6G1K9RXB4q5
- TLSH T17DC41779E6B844C4E2BAB53886638559D222FC09435196CF79687F463F737D0FABA300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.