General
- Target 2026-07-23_087607de6e3e27a9aed60085aaf314d6_cobalt-strike_hijackloader_icedid_stealc
- Size 2.5MB
- Sample260724-bspy5ayzdv
- SHA256 654e4fe39bf684ab9e01b77ade088a8d3234671438b82632bc20cb6645f18d12
- MD5 087607de6e3e27a9aed60085aaf314d6
- SHA1 ede41095e99090f46127d6aeb22fbb2a6714e1c3
- SHA512 107a37d47f9b2125c40682e3192d1b856f90e7709028d0398d31765558f0aa3f93f857c57b4608df4b4a438875797c4a0d2991bcc42d479e33e7f0a1eb44493c
- SSDEEP 24576:RuIEDq6glp/6J5XB+4wtfVwyWgtlkTRtZCPy1xk8U0Hvv8l4xJn2cWG:RuIEDAn/6hPw4DgfIvCP6W0xJn2cV
- TLSH T1C5C5C7FE8E7E53CAC1AEC5F0B57592C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_087607de6e3e27a9aed60085aaf314d6_cobalt-strike_hijackloader_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_087607de6e3e27a9aed60085aaf314d6_cobalt-strike_hijackloader_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_087607de6e3e27a9aed60085aaf314d6_cobalt-strike_hijackloader_icedid_stealc
- Size 2.5MB
- SHA256 654e4fe39bf684ab9e01b77ade088a8d3234671438b82632bc20cb6645f18d12
- MD5 087607de6e3e27a9aed60085aaf314d6
- SHA1 ede41095e99090f46127d6aeb22fbb2a6714e1c3
- SHA512 107a37d47f9b2125c40682e3192d1b856f90e7709028d0398d31765558f0aa3f93f857c57b4608df4b4a438875797c4a0d2991bcc42d479e33e7f0a1eb44493c
- SSDEEP 24576:RuIEDq6glp/6J5XB+4wtfVwyWgtlkTRtZCPy1xk8U0Hvv8l4xJn2cWG:RuIEDAn/6hPw4DgfIvCP6W0xJn2cV
- TLSH T1C5C5C7FE8E7E53CAC1AEC5F0B57592C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext