General
- Target 2026-07-20_fe502fa14d1df8a2b01fa35b6f39ea62_cobalt-strike_icedid_stealc
- Size 120KB
- Sample260720-j8vtbadz2y
- SHA256 cce3b2b4d10ae82d7e86889ac63734da8456a97009a8c1070b9f1b0d7f4978f2
- MD5 fe502fa14d1df8a2b01fa35b6f39ea62
- SHA1 aedb21baa4760ef667efa373d1a39ae385977f34
- SHA512 5862e018b20dc2198e927a63a705e0c7433349be82c4261b53eda6d9cd1661abef0d094d8edc7e29f90acf4e25d82a72b1aaab47ba1cedf02b38027c9f5ec93b
- SSDEEP 3072:InHfbFvDTifnARNPPzHYdi6d5ZIvum1rNku:WHxvDT/NPrkFIvum1Zku
- TLSH T106C35B97B3E530F9E1B7867888550A06D772F8750B219FEF07A042961F236D18D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_fe502fa14d1df8a2b01fa35b6f39ea62_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_fe502fa14d1df8a2b01fa35b6f39ea62_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_fe502fa14d1df8a2b01fa35b6f39ea62_cobalt-strike_icedid_stealc
- Size 120KB
- SHA256 cce3b2b4d10ae82d7e86889ac63734da8456a97009a8c1070b9f1b0d7f4978f2
- MD5 fe502fa14d1df8a2b01fa35b6f39ea62
- SHA1 aedb21baa4760ef667efa373d1a39ae385977f34
- SHA512 5862e018b20dc2198e927a63a705e0c7433349be82c4261b53eda6d9cd1661abef0d094d8edc7e29f90acf4e25d82a72b1aaab47ba1cedf02b38027c9f5ec93b
- SSDEEP 3072:InHfbFvDTifnARNPPzHYdi6d5ZIvum1rNku:WHxvDT/NPrkFIvum1Zku
- TLSH T106C35B97B3E530F9E1B7867888550A06D772F8750B219FEF07A042961F236D18D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Checks whether UAC is enabled