General
- Target 2026-07-08_1874310616ef6d04c4d2ddde2edd1b13_cobalt-strike_icedid_stealc
- Size 428KB
- Sample260708-sqzh8ahs8y
- SHA256 93b1ec8be88710baec6ed70044ad78a58b785f1e0fd830cc315666979d55a196
- MD5 1874310616ef6d04c4d2ddde2edd1b13
- SHA1 ee8e9451fa3ba76c2c2fab57cb6a409eea282293
- SHA512 332cc19688ba1bbbfe7e1f12596f043ee9aaca328ec5da8605237a9b41588ef99b9c8bca39296a68c2328c93acffa900049f61bd7e4d2a40ba228fc1ee57d640
- SSDEEP 12288:d8AYKtX7g4VSyWYgeWYg955/155/46WjaAYQVRnvQOXo9:d8AYk7g4V/6dJQHFG
- TLSH T16C945A15E7A510FCF177D138CD824942EA727C5A1791E6CF0398AA6A5F732E05E3EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-08_1874310616ef6d04c4d2ddde2edd1b13_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_1874310616ef6d04c4d2ddde2edd1b13_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_1874310616ef6d04c4d2ddde2edd1b13_cobalt-strike_icedid_stealc
- Size 428KB
- SHA256 93b1ec8be88710baec6ed70044ad78a58b785f1e0fd830cc315666979d55a196
- MD5 1874310616ef6d04c4d2ddde2edd1b13
- SHA1 ee8e9451fa3ba76c2c2fab57cb6a409eea282293
- SHA512 332cc19688ba1bbbfe7e1f12596f043ee9aaca328ec5da8605237a9b41588ef99b9c8bca39296a68c2328c93acffa900049f61bd7e4d2a40ba228fc1ee57d640
- SSDEEP 12288:d8AYKtX7g4VSyWYgeWYg955/155/46WjaAYQVRnvQOXo9:d8AYk7g4V/6dJQHFG
- TLSH T16C945A15E7A510FCF177D138CD824942EA727C5A1791E6CF0398AA6A5F732E05E3EB02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1