General
- Target 2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid
- Size 427KB
- Sample260820-weshbasene
- SHA256 03794f76a67e5827a5bcdb04c51afcf9302addca7d4f202790f92562a892f4e7
- MD5 5bdb4d3af29995b96ee5d1b30dc7ff1a
- SHA1 32c80afd2e34ef5fa12e429a7b3e8a47ed403e77
- SHA512 2ccd8a6847d0916a6c818967bb105d74283e1f97dcb7c97725e68cbf9f08d5d64e10a78f1efdfd3982317cffb87c6fca09f42ac2ecf16c8c0b74ef7c7c5a2e10
- SSDEEP 6144:fuWt0GeHbnHZqtAbJ9FpgwFQgrsyesR2BcRvtd4bCdKYY5nFqJ+DDyK:fuFVHL51PFmwFcsKCdO5NDd
- TLSH T12494019BA79530E9E177813890638A15E373BC79575099AF03B8C6761F637C20E3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid
- Size 427KB
- SHA256 03794f76a67e5827a5bcdb04c51afcf9302addca7d4f202790f92562a892f4e7
- MD5 5bdb4d3af29995b96ee5d1b30dc7ff1a
- SHA1 32c80afd2e34ef5fa12e429a7b3e8a47ed403e77
- SHA512 2ccd8a6847d0916a6c818967bb105d74283e1f97dcb7c97725e68cbf9f08d5d64e10a78f1efdfd3982317cffb87c6fca09f42ac2ecf16c8c0b74ef7c7c5a2e10
- SSDEEP 6144:fuWt0GeHbnHZqtAbJ9FpgwFQgrsyesR2BcRvtd4bCdKYY5nFqJ+DDyK:fuFVHL51PFmwFcsKCdO5NDd
- TLSH T12494019BA79530E9E177813890638A15E373BC79575099AF03B8C6761F637C20E3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detect binaries embedding considerable number of MFA browser extension IDs.
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing bas64 encoded gzip files
-
Executes dropped EXE