Analysis
- max time kernel
11s - max time network
16s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
08/08/2026, 17:08
Errors
Reason
Machine shutdown
General
- Target 2026-08-08_e59eff90f1d24617cfbddf16f81845cb_cobalt-strike_icedid_stealc.exe
- Size 248KB
- Sample260808-vnrfyaee76
- SHA256 1a26482a1278474a721bd058973b8f113aee89be710290dc9c89088ceb786c96
Score
6/10
Malware Config
Signatures
- Drops desktop.ini file(s) 2 IoCs
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-08_e59eff90f1d24617cfbddf16f81845cb_cobalt-strike_icedid_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-08_e59eff90f1d24617cfbddf16f81845cb_cobalt-strike_icedid_stealc.exe"1⤵
- Drops desktop.ini file(s)
- Writes to the Master Boot Record (MBR)
- Suspicious use of AdjustPrivilegeToken