2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid

General

Target
2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid
Size 682KB
Sample260908-jfftpavcmb
SHA256 1c22edc10509877a70eb570a36033d1fd68d4e7c2445fed1e029bf60fb9b243d
MD5 b7833884752997f3e39997f29ab947ca
SHA1 4568a9183b697d27fd7d9d930315d066cdd1e7c1
SHA512 5e26350922ae47dad7dfb84907e4cbff7d4b4b25f5f54b973a2dc13e903ff460065d1d302f9c36268a5c710ab84ad306b3c4d032263273fadf30c81b7246780f
SSDEEP 12288:rz/Dh2LBk0HqnuuDhxncyuF9yD9WKOt3/SX2qtKtPB/OYfWq4Vlx+F:rzZgquuDhpczG3Ot3KX2qmrWVl
TLSH
T16DE41227BAA270FAD2A6D831D5420A45DB737C7A4BB0ABCF43500EC61E676D08D3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid

File Explorer

2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid

.exe 682KB

2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid

IMPHASH 602579a661d09e3beff81470b8ff4e16
SHA256 1c22edc10509877a70eb570a36033d1fd68d4e7c2445fed1e029bf60fb9b243d
MD5 b7833884752997f3e39997f29ab947ca
SHA1 4568a9183b697d27fd7d9d930315d066cdd1e7c1
SHA512 5e26350922ae47dad7dfb84907e4cbff7d4b4b25f5f54b973a2dc13e903ff460065d1d302f9c36268a5c710ab84ad306b3c4d032263273fadf30c81b7246780f
SSDEEP 12288:rz/Dh2LBk0HqnuuDhxncyuF9yD9WKOt3/SX2qtKtPB/OYfWq4Vlx+F:rzZgquuDhpczG3Ot3KX2qmrWVl
TLSH
T16DE41227BAA270FAD2A6D831D5420A45DB737C7A4BB0ABCF43500EC61E676D08D3DB51
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5476

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW SetFilePointerEx HeapAlloc GetConsoleOutputCP CloseHandle HeapReAlloc HeapSize GetProcessHeap LCMapStringW CompareStringW GetModuleFileNameW GetLastError SetLastError FlushFileBuffers WriteConsoleW GetConsoleMode HeapCreate VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc MultiByteToWideChar WideCharToMultiByte LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW

ntdll

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

Name

.text

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

559KB

Virtual Size

562KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-07_b7833884752997f3e39997f29ab947ca_cobalt-strike_icedid

kernel32

ntdll

generic