General
- Target 2026-07-06_4a78842b94f6042e657e3d513154c3c2_cobalt-strike_icedid
- Size 114KB
- Sample260707-ej4ygaht8v
- SHA256 bf03e21a9d3cb975e9064ddd57d4854df1d25f397fc2a728cacb3493fb72bdfc
- MD5 4a78842b94f6042e657e3d513154c3c2
- SHA1 72191e42e3a6d0eea668ff635c60ee35c7bfd85d
- SHA512 461d3b021122d392c66044415aea3ed2884327b491662bbd5be2b1dbd4f54dd4a32e974a747c77b0222bf2672f9b958ede88286d827d9d74cbead2f9a559b701
- SSDEEP 3072:/GWh/gdYzf+mBkG2E/F5eq3sEjPmS9++++/qmJ34U61nP2:/1/phBkG2KFL3ZT++++/sW
- TLSH T169B35A57B3F930F9E1B68674C4558656AB36B87607609FEF03A082991F232D09D3DF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_4a78842b94f6042e657e3d513154c3c2_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4a78842b94f6042e657e3d513154c3c2_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4a78842b94f6042e657e3d513154c3c2_cobalt-strike_icedid
- Size 114KB
- SHA256 bf03e21a9d3cb975e9064ddd57d4854df1d25f397fc2a728cacb3493fb72bdfc
- MD5 4a78842b94f6042e657e3d513154c3c2
- SHA1 72191e42e3a6d0eea668ff635c60ee35c7bfd85d
- SHA512 461d3b021122d392c66044415aea3ed2884327b491662bbd5be2b1dbd4f54dd4a32e974a747c77b0222bf2672f9b958ede88286d827d9d74cbead2f9a559b701
- SSDEEP 3072:/GWh/gdYzf+mBkG2E/F5eq3sEjPmS9++++/qmJ34U61nP2:/1/phBkG2KFL3ZT++++/sW
- TLSH T169B35A57B3F930F9E1B68674C4558656AB36B87607609FEF03A082991F232D09D3DF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.