General
- Target 2026-08-07_e030ab3c9d552667d408f3cfdebbfdbc_cobalt-strike_icedid_stealc
- Size 249KB
- Sample260807-jh4njaef55
- SHA256 a820accc1fa8495e54d24e612278b5c9672604d7241a331fb1e059f58367154d
Score
10/10
Malware Config
Extracted
Path
-
C:\Users\Admin\Music\!README_UNLOCK.txt
Ransom Note
- ======================================== YOUR FILES HAVE BEEN ENCRYPTED ======================================== All your important documents, photos, and data have been encrypted with AES-256-GCM. To recover your files, you need the decryption key. Your unique Hardware ID (HWID) is: a5e7a50b79433b2c088f773f3d48196ae17f2a8be072a0f25feac62fb72d6333 Send this ID to the contact below to receive your decryption tool and key. Contact: [OPERATOR_CONTACT_PLACEHOLDER] WARNING: - Do NOT attempt to decrypt files manually. - Do NOT rename or modify .locked files. - Any tampering will result in permanent data loss. - Antivirus software CANNOT recover your files. Time is limited. Contact us soon.
Extracted
Path
-
C:\Users\Admin\Music\!README_UNLOCK.txt
Ransom Note
- ======================================== YOUR FILES HAVE BEEN ENCRYPTED ======================================== All your important documents, photos, and data have been encrypted with AES-256-GCM. To recover your files, you need the decryption key. Your unique Hardware ID (HWID) is: 34c2b2b6209159f1f4b3695017cc4e9d9a28c9fec264903fae230a15d5d2850a Send this ID to the contact below to receive your decryption tool and key. Contact: [OPERATOR_CONTACT_PLACEHOLDER] WARNING: - Do NOT attempt to decrypt files manually. - Do NOT rename or modify .locked files. - Any tampering will result in permanent data loss. - Antivirus software CANNOT recover your files. Time is limited. Contact us soon.
Targets
-
- Target 2026-08-07_e030ab3c9d552667d408f3cfdebbfdbc_cobalt-strike_icedid_stealc
- Size 249KB
- SHA256 a820accc1fa8495e54d24e612278b5c9672604d7241a331fb1e059f58367154d
Score10/10