ebc740732168c16535a8c6525d70d7700e3ce0d9257136c5582ef036878bbb9a

Analysis

max time kernel
148s
max time network
151s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:50

Target
2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar.exe
Size 10.3MB
Sample260808-a67wesztay
SHA256 ebc740732168c16535a8c6525d70d7700e3ce0d9257136c5582ef036878bbb9a
MD5 aad294e6bf8e9bf57dc65e005db9b18e
SHA1 ea8bffcd5f2b42609bf359ff2d0de83b8fa9c427
SHA512 0afd1dc5ac6613eb0a9127b05b11398b50577cf2e90d4fe0a8c9615c39047c6091e05e3ecad8005b60d4a7a0057c2956abdccff27fd9744717b89d9ae07780aa
SSDEEP 196608:2r8cwOHB1SkNJ1wQQjrwS8LjoO+uGFXrwS8LjoO+lVvCs98BIC7EiJpHQ2v/:2r8cwOHnbDGXwSm/fGxwSm/cxHjCAiw4
TLSH
T1E0B6336AF3A546F4E1679030A853161AE733785F0330F6DF2994D5266F63BA02D7E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4428	2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:4428