c8017ea98b4b250f9a98b119666b34ea5e1663c15a346666f02f2cc5af31501c

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/08/2026, 23:46

Target
2026-08-11_c1675afc5d59bca15a8ab334fd6b375a_cobalt-strike_icedid.exe
Size 108KB
Sample260811-3sr72a1wex
SHA256 c8017ea98b4b250f9a98b119666b34ea5e1663c15a346666f02f2cc5af31501c
MD5 c1675afc5d59bca15a8ab334fd6b375a
SHA1 b654b654a98d521714f1205f49754bc1cf5c1f60
SHA512 4b33e9bb5523932eda8306ae9b2ed56e411e6711aa62971479647f49b38e17dd293b1aa8ffc3f218e03d1998c1aa144027abce48fe64cabfd8c261eaa0315c77
SSDEEP 3072:oMpbWAfVIbmDOFmSvygCuROAm3m2ydWHHZ:ouWAlDOIS5OLnZ
TLSH
T14DB35A57A3E630F8E1B38279C8610A09EB72B87117619FEF43A0465A1F276D19D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3212	2026-08-11_c1675afc5d59bca15a8ab334fd6b375a_cobalt-strike_icedid.exe
3212	2026-08-11_c1675afc5d59bca15a8ab334fd6b375a_cobalt-strike_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-11_c1675afc5d59bca15a8ab334fd6b375a_cobalt-strike_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-11_c1675afc5d59bca15a8ab334fd6b375a_cobalt-strike_icedid.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3212