General
- Target 2026-07-21_c74b330d4547ed63fab814ce2b6ab5ba_cobalt-strike_icedid
- Size 356KB
- Sample260721-cwfejadz9s
- SHA256 b40bf4acd4e8a79bf273858cddbefb8cb561d401985db461a665cefdae9b6322
- MD5 c74b330d4547ed63fab814ce2b6ab5ba
- SHA1 6fe1f3995c207319b6929f0c7cfe8eb6c0f2ea1b
- SHA512 4d34db4e2e5335ffe877eb44472000b3c55bdc987fbfa0cd009952bf95b58620acf891fd2241e26ba35023b6deab82e75bf1c7117a7b9621666e866309cfaa20
- SSDEEP 6144:tDB208EuGVF0eoWglJI7k5AJI59aswny4:dwjE0jlJIQV59asw7
- TLSH T103747C25E69614FCE1B7C174CD974942D7B6F84A07A0AEEF139049A20E37AE44E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_c74b330d4547ed63fab814ce2b6ab5ba_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_c74b330d4547ed63fab814ce2b6ab5ba_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_c74b330d4547ed63fab814ce2b6ab5ba_cobalt-strike_icedid
- Size 356KB
- SHA256 b40bf4acd4e8a79bf273858cddbefb8cb561d401985db461a665cefdae9b6322
- MD5 c74b330d4547ed63fab814ce2b6ab5ba
- SHA1 6fe1f3995c207319b6929f0c7cfe8eb6c0f2ea1b
- SHA512 4d34db4e2e5335ffe877eb44472000b3c55bdc987fbfa0cd009952bf95b58620acf891fd2241e26ba35023b6deab82e75bf1c7117a7b9621666e866309cfaa20
- SSDEEP 6144:tDB208EuGVF0eoWglJI7k5AJI59aswny4:dwjE0jlJIQV59asw7
- TLSH T103747C25E69614FCE1B7C174CD974942D7B6F84A07A0AEEF139049A20E37AE44E3E713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.