be13fc0e3a9f2941eb165825406dc9b84d9a05bbb140f61f1510ef2fcba64d31

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 04:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe
Size 255KB
Sample260822-enl88aeb45
SHA256 be13fc0e3a9f2941eb165825406dc9b84d9a05bbb140f61f1510ef2fcba64d31
MD5 708114aedd1e61147469b162f83b4b31
SHA1 68c9fd10b4325e8c672b52c21b9a88e369fc1ad5
SHA512 27bfe2ca06b14f2d85ee56b1ddad765431a0858c036cc6d80e49d8a469738e02bdd6761f12bc25515a5ef29845195e9cd4a6e3c212937133e45875289789ed2d
SSDEEP 3072:Hb3nIiLjs7RL9kxIT029gE8h8TvBX81vbRVL:DIin2GxIgJE8CZMZN
TLSH
T13D44F8E322D1E0E0FDAD9DF4E81205AD9337BC3566165BAB16407E072D363D18C2AB76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vifTgEWk = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe"	2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe"
1⤵
- Adds Run key to start application
PID:4220

C:\Users\Admin\AppData\Local\Temp\2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe
C:\Users\Admin\AppData\Local\Temp\2026-08-22_708114aedd1e61147469b162f83b4b31_cobalt-strike_icedid.exe
1⤵
PID:4536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads