General
- Target 2026-08-04_dc91660f2728e9b1e039b6ba3c4eee08_cobalt-strike_icedid
- Size 120KB
- Sample260804-fwwnassajf
- SHA256 9d1c0932a5e51e5f13da5be031b8ca218cf988d80d19cfcefed037514d33b346
- MD5 dc91660f2728e9b1e039b6ba3c4eee08
- SHA1 5c5127e1376f886c821ca6578046530db9680cb2
- SHA512 8f8417020438e47005f44d5f1d050f0261b041b61b4ddb36ff81c4343073340aafa1538ecdeb32b77db4d37d0be3f08419def19e9ff3f760ed7ce35dc045b3a9
- SSDEEP 3072:meN8FkWY3vCHKIZBTIfV+QemOP+N3MAf6Q4u:TIkraKoBT/QEP+NxSQf
- TLSH T11AC38B5B63E530F9E1B38638C4954A199772F8351B609FEF07A443961F232D18D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_dc91660f2728e9b1e039b6ba3c4eee08_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_dc91660f2728e9b1e039b6ba3c4eee08_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_dc91660f2728e9b1e039b6ba3c4eee08_cobalt-strike_icedid
- Size 120KB
- SHA256 9d1c0932a5e51e5f13da5be031b8ca218cf988d80d19cfcefed037514d33b346
- MD5 dc91660f2728e9b1e039b6ba3c4eee08
- SHA1 5c5127e1376f886c821ca6578046530db9680cb2
- SHA512 8f8417020438e47005f44d5f1d050f0261b041b61b4ddb36ff81c4343073340aafa1538ecdeb32b77db4d37d0be3f08419def19e9ff3f760ed7ce35dc045b3a9
- SSDEEP 3072:meN8FkWY3vCHKIZBTIfV+QemOP+N3MAf6Q4u:TIkraKoBT/QEP+NxSQf
- TLSH T11AC38B5B63E530F9E1B38638C4954A199772F8351B609FEF07A443961F232D18D3AF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Modifies RDP port number used by Windows
-
Adds Run key to start application
-
Checks whether UAC is enabled