2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 543KB
Sample260411-reda6sc18z
SHA256 bf5e923c0d16bad9762eccb22cffca0687dcd36fad79468c81873fcf513e4c8d
MD5 7daab2511389d6e25e505f955d34be1b
SHA1 2d3f05aa20568cb60117521e7d01c493d0f4e79b
SHA512 3caee61e56d284020edb6d7febdfb1fb8b83ca65f1709c50a7e8ccb0180d733341d22a6fd1a6a106a3f55033cb7cb90960dac4206487531c54c28ce8c6f17256
SSDEEP 6144:F/s5q9Rruq1QVbLxDdibBLNOrisq/ih/Sqer5+nDFog2Sqer5+nDFoyLH:pv9IqKpL+fOr46zer5+nZoRer5+nZoyz
TLSH
T143C46C0E76A594E7D9334F306C7086916733B8A36F515AE72AC0531E4C6A2F4CF7AB24
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 543KB

2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

SHA256 bf5e923c0d16bad9762eccb22cffca0687dcd36fad79468c81873fcf513e4c8d
MD5 7daab2511389d6e25e505f955d34be1b
SHA1 2d3f05aa20568cb60117521e7d01c493d0f4e79b
SHA512 3caee61e56d284020edb6d7febdfb1fb8b83ca65f1709c50a7e8ccb0180d733341d22a6fd1a6a106a3f55033cb7cb90960dac4206487531c54c28ce8c6f17256
SSDEEP 6144:F/s5q9Rruq1QVbLxDdibBLNOrisq/ih/Sqer5+nDFog2Sqer5+nDFoyLH:pv9IqKpL+fOr46zer5+nZoRer5+nZoyz
TLSH
T143C46C0E76A594E7D9334F306C7086916733B8A36F515AE72AC0531E4C6A2F4CF7AB24
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

159KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

91KB

Virtual Size

30.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

14KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

HAjrbrbJ

Size

11KB

Virtual Size

10KB

Characteristics

Name

ANSOnlJr

Size

512B

Virtual Size

15B

Characteristics

Name

DaOKYmpH

Size

3KB

Virtual Size

3KB

Characteristics

Name

mXwinHCM

Size

1024B

Virtual Size

937B

Characteristics

Name

lxNiNGnZ

Size

105KB

Virtual Size

105KB

Characteristics

Name

HNIorZYH

Size

4KB

Virtual Size

4KB

Characteristics

Name

QjDKzReA

Size

117KB

Virtual Size

117KB

Characteristics

Name

xHQYcVSV

Size

5KB

Virtual Size

4KB

Characteristics

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-11_7daab2511389d6e25e505f955d34be1b_amadey_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

generic