General
- Target 2026-07-09_c4b9e5af6c6ed818c230cdf4afc1ab67_cobalt-strike_icedid
- Size 343KB
- Sample260709-t128jadw2n
- SHA256 99bda4887c96cedec4140e766e98d167dad52fdd85135a97b32cd68aae64c6a3
- MD5 c4b9e5af6c6ed818c230cdf4afc1ab67
- SHA1 40ca76ffcbe247c0f18b3c7f0dbe74af4e2c135a
- SHA512 a798ec0b06bc1de0f19114a78223fa25e3dbb88dd70aecbfa9fd4231ce5307ef2a0fbb20d93c1830060190125577dcaf5080d480c43bb9dd24a6a84d8918f6d4
- SSDEEP 6144:vhjzHCLKVI3xdIJql3ProSEE2eS0JE2akcuuRVPZ1K49K/llvFbO5:vhiGexfXEES0J4kwRRfK44/lBF
- TLSH T1EE74BE2766E032E2E77F25318347DE8EA7337E304244DB9B46D25F940E326915DA9E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_c4b9e5af6c6ed818c230cdf4afc1ab67_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_c4b9e5af6c6ed818c230cdf4afc1ab67_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_c4b9e5af6c6ed818c230cdf4afc1ab67_cobalt-strike_icedid
- Size 343KB
- SHA256 99bda4887c96cedec4140e766e98d167dad52fdd85135a97b32cd68aae64c6a3
- MD5 c4b9e5af6c6ed818c230cdf4afc1ab67
- SHA1 40ca76ffcbe247c0f18b3c7f0dbe74af4e2c135a
- SHA512 a798ec0b06bc1de0f19114a78223fa25e3dbb88dd70aecbfa9fd4231ce5307ef2a0fbb20d93c1830060190125577dcaf5080d480c43bb9dd24a6a84d8918f6d4
- SSDEEP 6144:vhjzHCLKVI3xdIJql3ProSEE2eS0JE2akcuuRVPZ1K49K/llvFbO5:vhiGexfXEES0J4kwRRfK44/lBF
- TLSH T1EE74BE2766E032E2E77F25318347DE8EA7337E304244DB9B46D25F940E326915DA9E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks whether UAC is enabled