General
- Target 2026-07-23_651d931a88ba452d69653cc60fec5e9e_cobalt-strike_icedid_stealc
- Size 2.5MB
- Sample260724-bmpfeayycv
- SHA256 951e71abced51b38530c5e3a963c40e33baad2988c4bd3b74e16c0bbc88b8bcd
- MD5 651d931a88ba452d69653cc60fec5e9e
- SHA1 e21e74bf43a81d65a2182e6f0806c7efdd75837e
- SHA512 da95afc60ea6e8004191e4a2c212d429405e84daf0453af968741c21941308041bfb3d514a79a7f32c55a21fe501b1a1949c46b1f51273ce1665e4a85ef5bbb6
- SSDEEP 24576:QuIEDq6glp/6J5XB+4wtfVwyWgt8kTRmZCPy1xk8U0Hvv8l4xJn2vZa:QuIEDAn/6hPw4DguIICP6W0xJn2vw
- TLSH T184C5C7FE8E7E53CAC1AEC5F0B57592C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_651d931a88ba452d69653cc60fec5e9e_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_651d931a88ba452d69653cc60fec5e9e_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_651d931a88ba452d69653cc60fec5e9e_cobalt-strike_icedid_stealc
- Size 2.5MB
- SHA256 951e71abced51b38530c5e3a963c40e33baad2988c4bd3b74e16c0bbc88b8bcd
- MD5 651d931a88ba452d69653cc60fec5e9e
- SHA1 e21e74bf43a81d65a2182e6f0806c7efdd75837e
- SHA512 da95afc60ea6e8004191e4a2c212d429405e84daf0453af968741c21941308041bfb3d514a79a7f32c55a21fe501b1a1949c46b1f51273ce1665e4a85ef5bbb6
- SSDEEP 24576:QuIEDq6glp/6J5XB+4wtfVwyWgt8kTRmZCPy1xk8U0Hvv8l4xJn2vZa:QuIEDAn/6hPw4DguIICP6W0xJn2vw
- TLSH T184C5C7FE8E7E53CAC1AEC5F0B57592C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext