2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid

General

Target
2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid
Size 684KB
Sample260910-d27xeawcjd
SHA256 86dcbf2878d516cb4db626e7cb21af2a800aacf125bc8e473e49bcce99712392
MD5 aca080d8a4fb55b3bc46ef160c5e8ec4
SHA1 58fbcd5b0596e96461306e0d57b647ecae1727d8
SHA512 fef87629d82746d19ad51c164f76d008fd4567851998bf15a23025ab0c53aa508f9b9dbcfda064ad3cc5db3db8d4f1824874678f5057ee3e0603477fcdf14c7e
SSDEEP 12288:XEl1RVAqDSIignBz8eXNnTayj6oJjG8keh+OvSXXbxWKXkfjYMWNc3:XeneSpHcUrSXLxWekfc1G
TLSH
T13AE4129B63A530E9E2B78235C0658B55DB327C714B65ABEF07A073892F732C18D39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid

File Explorer

2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid

.exe 684KB

2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid

IMPHASH a388dc11c09cd50b7197e021c80895a7
SHA256 86dcbf2878d516cb4db626e7cb21af2a800aacf125bc8e473e49bcce99712392
MD5 aca080d8a4fb55b3bc46ef160c5e8ec4
SHA1 58fbcd5b0596e96461306e0d57b647ecae1727d8
SHA512 fef87629d82746d19ad51c164f76d008fd4567851998bf15a23025ab0c53aa508f9b9dbcfda064ad3cc5db3db8d4f1824874678f5057ee3e0603477fcdf14c7e
SSDEEP 12288:XEl1RVAqDSIignBz8eXNnTayj6oJjG8keh+OvSXXbxWKXkfjYMWNc3:XeneSpHcUrSXLxWekfc1G
TLSH
T13AE4129B63A530E9E2B78235C0658B55DB327C714B65ABEF07A073892F732C18D39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle WaitForSingleObject CreateEventA Sleep GetTickCount64 GetModuleHandleA GetProcAddress WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

580KB

Virtual Size

579KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-08_aca080d8a4fb55b3bc46ef160c5e8ec4_cobalt-strike_icedid

kernel32

generic