4dbea8355945ce8aa188db5d839b5460ebcaad13f5f84581a9252954fa8df498

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 11:16

Target
2026-10-14_d561d97e7f101700f988f6321f32ddad_cobalt-strike_icedid.exe
Size 155KB
Sample261014-ndcfpsb13l
SHA256 4dbea8355945ce8aa188db5d839b5460ebcaad13f5f84581a9252954fa8df498
MD5 d561d97e7f101700f988f6321f32ddad
SHA1 f27b350f9fa31d1b51d8078301f56ca8e3951e0c
SHA512 17de918ec0a8d3742867f7fd2ea4e21792302c51a7305e48485bc87fd89d2fce62f073aca3d2a1927d49bebefa520a8c268cf0e6f840d24903299e9370197b95
SSDEEP 3072:0wLu1WfmiTl9BJUhaTzpnjHFhfZdsYaiWwDVjB:0QfhBrJUh+njHvxhT
TLSH
T14FF36C47F2E230F8E466C634C9625611FBB278710B509BAF57A447362F23790AD3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4372	2026-10-14_d561d97e7f101700f988f6321f32ddad_cobalt-strike_icedid.exe
4372	2026-10-14_d561d97e7f101700f988f6321f32ddad_cobalt-strike_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-14_d561d97e7f101700f988f6321f32ddad_cobalt-strike_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-14_d561d97e7f101700f988f6321f32ddad_cobalt-strike_icedid.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4372