General
- Target 2026-07-05_a75f4351bc54a5e526d7053c415dbdbd_cobalt-strike_icedid_stealc
- Size 199KB
- Sample260705-bn3dnafz51
- SHA256 51f89aab0ac8f7a3e8357b2c1b191deb0aaf9628386af6b9d3369d761d84dd6c
- MD5 a75f4351bc54a5e526d7053c415dbdbd
- SHA1 2be214e00886002d11e78be4d9355bcccab07947
- SHA512 7ce91b818d4cd5f77c5f896df381f1c48028a9b0b2c55a3fd1618d31a5a2837760278a00fda189cb600d7dfea46cbf0befd6ad947fe8e4e34e757adcf6129c81
- SSDEEP 3072:6HqHgoOfkB9M4c8SXMwG/nXxJNjw4DMlXnRZG2J1vQ4cZO4UPKqIxZ:NA1ePBJLQ+0vQrBnF
- TLSH T18014091AFAB510E5D1BBC038C592251AF9B2789647706BCF57900BA78F23BE4AD3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_a75f4351bc54a5e526d7053c415dbdbd_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_a75f4351bc54a5e526d7053c415dbdbd_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_a75f4351bc54a5e526d7053c415dbdbd_cobalt-strike_icedid_stealc
- Size 199KB
- SHA256 51f89aab0ac8f7a3e8357b2c1b191deb0aaf9628386af6b9d3369d761d84dd6c
- MD5 a75f4351bc54a5e526d7053c415dbdbd
- SHA1 2be214e00886002d11e78be4d9355bcccab07947
- SHA512 7ce91b818d4cd5f77c5f896df381f1c48028a9b0b2c55a3fd1618d31a5a2837760278a00fda189cb600d7dfea46cbf0befd6ad947fe8e4e34e757adcf6129c81
- SSDEEP 3072:6HqHgoOfkB9M4c8SXMwG/nXxJNjw4DMlXnRZG2J1vQ4cZO4UPKqIxZ:NA1ePBJLQ+0vQrBnF
- TLSH T18014091AFAB510E5D1BBC038C592251AF9B2789647706BCF57900BA78F23BE4AD3D701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.