General
- Target 2026-09-04_0b6d659700b633e7007ddc3adf90952a_cobalt-strike_icedid_stealc
- Size 526KB
- Sample260905-xg5fbszhqa
- SHA256 373a9b338faa378f424a8ced1290e8ec2d57bd2e8377890e6d83dfd8f353a2bc
- MD5 0b6d659700b633e7007ddc3adf90952a
- SHA1 7fee6fd421093f9d2a0112b9e1d63f70bc061d9b
- SHA512 bea10c9ae503c795a33b498d9964fc7c5a24393996bad176031d1e4808d9005b4eb7f62c2ee9eb70162613403a2e32d86154bc276cd5b7ee90aa33d063381f38
- SSDEEP 6144:3pXIlXnYdTUj8iiqHB5oKqgY5h+ScUxtaa9YUOxlISZV3V:IrTJqgP4iWYUOxlp
- TLSH T1FCB4C69FA3408BE8D0F754358461671A623368F5FF5F52970FC438292E166E60E3B27A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_0b6d659700b633e7007ddc3adf90952a_cobalt-strike_icedid_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_0b6d659700b633e7007ddc3adf90952a_cobalt-strike_icedid_stealc.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_0b6d659700b633e7007ddc3adf90952a_cobalt-strike_icedid_stealc
- Size 526KB
- SHA256 373a9b338faa378f424a8ced1290e8ec2d57bd2e8377890e6d83dfd8f353a2bc
- MD5 0b6d659700b633e7007ddc3adf90952a
- SHA1 7fee6fd421093f9d2a0112b9e1d63f70bc061d9b
- SHA512 bea10c9ae503c795a33b498d9964fc7c5a24393996bad176031d1e4808d9005b4eb7f62c2ee9eb70162613403a2e32d86154bc276cd5b7ee90aa33d063381f38
- SSDEEP 6144:3pXIlXnYdTUj8iiqHB5oKqgY5h+ScUxtaa9YUOxlISZV3V:IrTJqgP4iWYUOxlp
- TLSH T1FCB4C69FA3408BE8D0F754358461671A623368F5FF5F52970FC438292E166E60E3B27A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (61) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.