General
- Target 2026-07-07_8b56ea8ce64db03eb728e19a7f58b107_cobalt-strike_icedid_stealc
- Size 890KB
- Sample260707-jd7jmacw9t
- SHA256 5ddebfd0830fabd4fa0190b5680408b6dcfec15a10503c8a00c96f04290eca2a
- MD5 8b56ea8ce64db03eb728e19a7f58b107
- SHA1 ba155d37eea2d8526e8d520e03e453ce353aae1c
- SHA512 c750a9fa00ea8f53f9ac564323c652e57ab32fc7c0365d0f51a3a0b33f67491a8033cefb7bf9707525da477beff2bc9b0086be38cc48e55e4cc23d3e0c005a44
- SSDEEP 24576:j2JxcnedIq90n3nnnWnnnnpnhnnnnnnn4nnnnnnnnnnnnHnninnVnnlnnInn2nnV:8990n3nnnWnnnnpnhnnnnnnn4nnnnnn
- TLSH T173152D816352C4DBE2224177C4E284F399356C29D71DFCA76670BDF63D3A885A8F360A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_8b56ea8ce64db03eb728e19a7f58b107_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_8b56ea8ce64db03eb728e19a7f58b107_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_8b56ea8ce64db03eb728e19a7f58b107_cobalt-strike_icedid_stealc
- Size 890KB
- SHA256 5ddebfd0830fabd4fa0190b5680408b6dcfec15a10503c8a00c96f04290eca2a
- MD5 8b56ea8ce64db03eb728e19a7f58b107
- SHA1 ba155d37eea2d8526e8d520e03e453ce353aae1c
- SHA512 c750a9fa00ea8f53f9ac564323c652e57ab32fc7c0365d0f51a3a0b33f67491a8033cefb7bf9707525da477beff2bc9b0086be38cc48e55e4cc23d3e0c005a44
- SSDEEP 24576:j2JxcnedIq90n3nnnWnnnnpnhnnnnnnn4nnnnnnnnnnnnHnninnVnnlnnInn2nnV:8990n3nnnWnnnnpnhnnnnnnn4nnnnnn
- TLSH T173152D816352C4DBE2224177C4E284F399356C29D71DFCA76670BDF63D3A885A8F360A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.