General
- Target 2026-08-20_2a99c36eaf67870c2753d13057d95697_cobalt-strike_icedid
- Size 274KB
- Sample260821-dqm3vs1hnd
- SHA256 273c570f6b28d4449221d8a6cb4c32635c82ef67178e4899e53451c930b84659
- MD5 2a99c36eaf67870c2753d13057d95697
- SHA1 a1cf19edc9ecdb0738dfd3d9412b29d653c25b17
- SHA512 ec022523b385b83e156f187ccd28cb59db4046e9a039bbc1ace3339bc79f4ff2eeb91b78e162f26c1016666f7463c71534dfc12cbc8a7b51f8a641c2ffeb0308
- SSDEEP 3072:BYyMd3CV6qXQag8hRzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzKrKMF9qIE:BYkIqTg2X
- TLSH T1EB54094C1689C2A9C677C7F9E389E5C1A36EEBB3078485EBB26F4F821723C0CD946545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2a99c36eaf67870c2753d13057d95697_cobalt-strike_icedid.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2a99c36eaf67870c2753d13057d95697_cobalt-strike_icedid.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2a99c36eaf67870c2753d13057d95697_cobalt-strike_icedid
- Size 274KB
- SHA256 273c570f6b28d4449221d8a6cb4c32635c82ef67178e4899e53451c930b84659
- MD5 2a99c36eaf67870c2753d13057d95697
- SHA1 a1cf19edc9ecdb0738dfd3d9412b29d653c25b17
- SHA512 ec022523b385b83e156f187ccd28cb59db4046e9a039bbc1ace3339bc79f4ff2eeb91b78e162f26c1016666f7463c71534dfc12cbc8a7b51f8a641c2ffeb0308
- SSDEEP 3072:BYyMd3CV6qXQag8hRzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzKrKMF9qIE:BYkIqTg2X
- TLSH T1EB54094C1689C2A9C677C7F9E389E5C1A36EEBB3078485EBB26F4F821723C0CD946545
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects ransomware indicator
-
Renames multiple (107) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE