General
- Target 2026-05-18_47bc28d22a10c7e1960b062e87b3cead_cobalt-strike_icedid_stealc
- Size 264KB
- Sample260811-k57jdazdpg
- SHA256 7a9205c88e748607693cd84d025d0993819223d1f6aac46ccf7482d3adf76f6e
- MD5 47bc28d22a10c7e1960b062e87b3cead
- SHA1 df97d1ea8c8722d8334dae099c5e74b36617b629
- SHA512 b9fa5a3a405dfb51bb0a638efe7233ce8955c26fb09272834b89ab064b8e0de34e38651c7850f3517e384db970fa52688eeff5db7c45b5d90a497c849d2f1f10
- SSDEEP 3072:55a1TVmjn5BQRvtSWWHyxrKw4wKdK5tdT1AZG/TsLNGBpY4DXTHh+edQRO:55YmknEOGwrdTQQmdRO
- TLSH T1D5446B55B69908FDD87BC53EC9831406E6727C4A47A0DEDF17A04AB60F176E0AE3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-18_47bc28d22a10c7e1960b062e87b3cead_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target 2026-05-18_47bc28d22a10c7e1960b062e87b3cead_cobalt-strike_icedid_stealc
- Size 264KB
- SHA256 7a9205c88e748607693cd84d025d0993819223d1f6aac46ccf7482d3adf76f6e
- MD5 47bc28d22a10c7e1960b062e87b3cead
- SHA1 df97d1ea8c8722d8334dae099c5e74b36617b629
- SHA512 b9fa5a3a405dfb51bb0a638efe7233ce8955c26fb09272834b89ab064b8e0de34e38651c7850f3517e384db970fa52688eeff5db7c45b5d90a497c849d2f1f10
- SSDEEP 3072:55a1TVmjn5BQRvtSWWHyxrKw4wKdK5tdT1AZG/TsLNGBpY4DXTHh+edQRO:55YmknEOGwrdTQQmdRO
- TLSH T1D5446B55B69908FDD87BC53EC9831406E6727C4A47A0DEDF17A04AB60F176E0AE3E702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Adds Run key to start application
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.