General
- Target 2026-07-24_c4013c8c4ecc676b4ec44e8020d8bd18_cobalt-strike_icedid_stealc
- Size 2.5MB
- Sample260724-l4hpasfe83
- SHA256 7659e26c1a0917f084ff480ff1a42d8c7379fc7642a80bb20951ae518ca28bd7
- MD5 c4013c8c4ecc676b4ec44e8020d8bd18
- SHA1 d02bbea7ed57a6e1c61e036ae6eec35acb37b3a1
- SHA512 55c7b84ec41231071110cba14e1ce91ae5941f40e518b02284bdf98c617a0bbed99731817805a3e2029439593a444dbb7f70b2f8c3de5e7b2162dbb000abf1a0
- SSDEEP 24576:4uIEDq6glp/6J5XB+4wtfVwyWgtlkTRtZCPy1xk8U0Hvv8l4xJn2cW6:4uIEDAn/6hPw4DgfIvCP6W0xJn2c5
- TLSH T1D0C5C7FE8E7E53CAC1AAC5F0B575D2C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_c4013c8c4ecc676b4ec44e8020d8bd18_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_c4013c8c4ecc676b4ec44e8020d8bd18_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_c4013c8c4ecc676b4ec44e8020d8bd18_cobalt-strike_icedid_stealc
- Size 2.5MB
- SHA256 7659e26c1a0917f084ff480ff1a42d8c7379fc7642a80bb20951ae518ca28bd7
- MD5 c4013c8c4ecc676b4ec44e8020d8bd18
- SHA1 d02bbea7ed57a6e1c61e036ae6eec35acb37b3a1
- SHA512 55c7b84ec41231071110cba14e1ce91ae5941f40e518b02284bdf98c617a0bbed99731817805a3e2029439593a444dbb7f70b2f8c3de5e7b2162dbb000abf1a0
- SSDEEP 24576:4uIEDq6glp/6J5XB+4wtfVwyWgtlkTRtZCPy1xk8U0Hvv8l4xJn2cW6:4uIEDAn/6hPw4DgfIvCP6W0xJn2c5
- TLSH T1D0C5C7FE8E7E53CAC1AAC5F0B575D2C6B4107848A076A7C62BC0079D67275A0ECD72C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext