General

  • Target
    2026-10-22_a65e1890cf299db9138c75abe885f40f_cobalt-strike_icedid_stealc
  • Size 376KB
  • Sample261024-b7d56se141
  • SHA256 9e4729d59cd11bb6f7a5837675a86b6bc7e374bcf0abbc0234d4be99f4477abb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-22_a65e1890cf299db9138c75abe885f40f_cobalt-strike_icedid_stealc
    • Size 376KB
    • SHA256 9e4729d59cd11bb6f7a5837675a86b6bc7e374bcf0abbc0234d4be99f4477abb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects executables referencing combination of virtualization drivers

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks