2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid

General

Target
2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid
Size 837KB
Sample261027-blff4sxv8p
SHA256 dad5aa478cc5dcfa122c88a898f2bee8ccef7e32cddc67603efe45bfabd7dbb6
MD5 fc606638b9bd72c964e9bf5aae065dbf
SHA1 66ff88707bbb51fad4885dcf52fe141dcc3834cd
SHA512 5e0e365a771a116d3869b770c9fc9a50fd5219c5b32b233d59de2b9a90c79f4042f79e6c8715e1a23590b1b4e4e905b4a6787017ffd6f50538754de2e0352f29
SSDEEP 12288:jp88cOCoskKbP6L2jvTtZXQGf5FJ5JZ8GsZfjsDylKjzqmVNPOcOL/AHEBR+O9mz:j5s5PTnAUz5DFs1jsLqmVNPEZ+OQw
TLSH
T191052297737530FDD17285358462AA04A7B0FCB617319BEF0BA5032B0E3A6D1AC39B12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid

File Explorer

2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid

.exe 837KB

2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid

IMPHASH 73529dc75e86e17068d3376a53506b62
SHA256 dad5aa478cc5dcfa122c88a898f2bee8ccef7e32cddc67603efe45bfabd7dbb6
MD5 fc606638b9bd72c964e9bf5aae065dbf
SHA1 66ff88707bbb51fad4885dcf52fe141dcc3834cd
SHA512 5e0e365a771a116d3869b770c9fc9a50fd5219c5b32b233d59de2b9a90c79f4042f79e6c8715e1a23590b1b4e4e905b4a6787017ffd6f50538754de2e0352f29
SSDEEP 12288:jp88cOCoskKbP6L2jvTtZXQGf5FJ5JZ8GsZfjsDylKjzqmVNPOcOL/AHEBR+O9mz:j5s5PTnAUz5DFs1jsLqmVNPEZ+OQw
TLSH
T191052297737530FDD17285358462AA04A7B0FCB617319BEF0BA5032B0E3A6D1AC39B12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\home\ec2-user\workspace\builds\tmp\artifacts\vscode-export\sln\build\bin\x64\MasterWithLTCG\Stumble Guys_x64_MasterWithLTCG_il2cpp.pdb

unityplayer

UnityMain2

kernel32

FindFirstFileExW WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Name

.text

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

173KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_fc606638b9bd72c964e9bf5aae065dbf_cobalt-strike_icedid

unityplayer

kernel32

generic