General
- Target 2026-07-06_f150bf89120f3979ee3cfeedf5c31161_cobalt-strike_hijackloader_icedid
- Size 574KB
- Sample260707-aaq8ssay4m
- SHA256 059c744f0e444385b2dc49bed7b603322dd65514b251f1343e5db8add6e74195
- MD5 f150bf89120f3979ee3cfeedf5c31161
- SHA1 a4a3334b59e562b44e330cd3909e03c3dac67d21
- SHA512 0372ccae07218557678672d3a0003e098e6b0718939931101567b9322b179ba506508d513207defb5357606865939c99cb088afe986e4500c9464c6b691f722c
- SSDEEP 6144:+Idt3ogs9itF3yeUogKGbbhXgohVIIciY4VWKSGmytRw6ssSys4zkSv:F5ogs9itFieqbNwoTxmEs54/v
- TLSH T172C41779E5B844C5E2AAB5388663855AD222FC09435196CF79687F063F37BD0FE7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f150bf89120f3979ee3cfeedf5c31161_cobalt-strike_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f150bf89120f3979ee3cfeedf5c31161_cobalt-strike_hijackloader_icedid.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f150bf89120f3979ee3cfeedf5c31161_cobalt-strike_hijackloader_icedid
- Size 574KB
- SHA256 059c744f0e444385b2dc49bed7b603322dd65514b251f1343e5db8add6e74195
- MD5 f150bf89120f3979ee3cfeedf5c31161
- SHA1 a4a3334b59e562b44e330cd3909e03c3dac67d21
- SHA512 0372ccae07218557678672d3a0003e098e6b0718939931101567b9322b179ba506508d513207defb5357606865939c99cb088afe986e4500c9464c6b691f722c
- SSDEEP 6144:+Idt3ogs9itF3yeUogKGbbhXgohVIIciY4VWKSGmytRw6ssSys4zkSv:F5ogs9itFieqbNwoTxmEs54/v
- TLSH T172C41779E5B844C5E2AAB5388663855AD222FC09435196CF79687F063F37BD0FE7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.