General

  • Target
    2026-08-19_d7ec31427f9c7895d1cf9e856cd3780a_cobalt-strike_icedid_ryuk
  • Size 170KB
  • Sample260819-3tl3eawcnd
  • SHA256 1514da33d70bec33e662b764395b3f067e24d9427440179ab5c211f845d8824a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-19_d7ec31427f9c7895d1cf9e856cd3780a_cobalt-strike_icedid_ryuk
    • Size 170KB
    • SHA256 1514da33d70bec33e662b764395b3f067e24d9427440179ab5c211f845d8824a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks