General

  • Target
    2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid
  • Size 427KB
  • Sample260820-weshbasene
  • SHA256 03794f76a67e5827a5bcdb04c51afcf9302addca7d4f202790f92562a892f4e7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Targets

    • Target
      2026-08-20_5bdb4d3af29995b96ee5d1b30dc7ff1a_cobalt-strike_icedid
    • Size 427KB
    • SHA256 03794f76a67e5827a5bcdb04c51afcf9302addca7d4f202790f92562a892f4e7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    • Detect binaries embedding considerable number of MFA browser extension IDs.

    • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

    • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks