86dcbf2878d516cb4db626e7cb21af2a800aacf125bc8e473e49bcce99712392

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 03:31

Target
2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid.exe
Size 684KB
Sample260910-d27xeawcjd
SHA256 86dcbf2878d516cb4db626e7cb21af2a800aacf125bc8e473e49bcce99712392
MD5 aca080d8a4fb55b3bc46ef160c5e8ec4
SHA1 58fbcd5b0596e96461306e0d57b647ecae1727d8
SHA512 fef87629d82746d19ad51c164f76d008fd4567851998bf15a23025ab0c53aa508f9b9dbcfda064ad3cc5db3db8d4f1824874678f5057ee3e0603477fcdf14c7e
SSDEEP 12288:XEl1RVAqDSIignBz8eXNnTayj6oJjG8keh+OvSXXbxWKXkfjYMWNc3:XeneSpHcUrSXLxWekfc1G
TLSH
T13AE4129B63A530E9E2B78235C0658B55DB327C714B65ABEF07A073892F732C18D39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3776	2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid.exe
3776	2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3776