2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid

General

Target
2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid
Size 176KB
Sample260723-m5qlzacb48
SHA256 75c81f624b2cd5871e930aaaa70f8f83dcf2d5605c4b55d18b930183a4f26edd
MD5 5c7afbeed5febcbee6ce28bfeff82bad
SHA1 278cbacefd821a9cc1f825e12311e7122deb0966
SHA512 bb27442ec7b1a3e91971394ec7e73823faf55e9caa597c66eb47cc9d1ced77b564101feea213096b85ad1d2418c57d1dbd0dc8d28421442050e6f909d4197f1c
SSDEEP 3072:Evx15qG6yMOvdlAWukzy8yPCaH62DtSN0JwQe:E5TqGRLAW7aT62zwB
TLSH
T1A8046B43E6A632F6D2664D748461898A47327E3557609BBB1740238F2EB36D38C79F33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid

File Explorer

2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid

.exe 176KB

2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid

IMPHASH bfded9a81b175bad39f23e0479e54a6e
SHA256 75c81f624b2cd5871e930aaaa70f8f83dcf2d5605c4b55d18b930183a4f26edd
MD5 5c7afbeed5febcbee6ce28bfeff82bad
SHA1 278cbacefd821a9cc1f825e12311e7122deb0966
SHA512 bb27442ec7b1a3e91971394ec7e73823faf55e9caa597c66eb47cc9d1ced77b564101feea213096b85ad1d2418c57d1dbd0dc8d28421442050e6f909d4197f1c
SSDEEP 3072:Evx15qG6yMOvdlAWukzy8yPCaH62DtSN0JwQe:E5TqGRLAW7aT62zwB
TLSH
T1A8046B43E6A632F6D2664D748461898A47327E3557609BBB1740238F2EB36D38C79F33
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6560

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW SetWindowLongPtrW MessageBoxW RemovePropW GetPropW EnableMenuItem GetSystemMenu DrawMenuBar ShowWindow CallWindowProcW wsprintfW

shell32

ShellExecuteW

kernel32

TlsFree GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW CloseHandle Sleep GetCurrentProcess GetCurrentThreadId CreateProcessW SetPriorityClass FreeLibrary GetModuleFileNameW GetProcAddress LoadLibraryW FreeConsole GetConsoleWindow RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WideCharToMultiByte CreateFileW GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue MultiByteToWideChar LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo SetFilePointerEx

ntdll

RtlUnwindEx RtlPcToFileHeader

Name

.text

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_5c7afbeed5febcbee6ce28bfeff82bad_cobalt-strike_icedid

user32

shell32

kernel32

ntdll

generic