2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

General

Target
2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 326KB
Sample260412-bf4azsbv7k
SHA256 d0df13d7ee924e03285edac1f795f3eb9ded3cc254a0f390812e25c7289ba9d9
MD5 701ffcae6fa7d6d538d4fcf7adeb2b23
SHA1 0921fcdd22b68bb297fb6d59e1f3eb10f3843b5e
SHA512 03e9126eebbe04c98c982c297e9e15844666c3b16c516aeb3a89ffe76aa4b1643a2e073d3b5ce20ed6aa9070dea61874564da5527fc6c56352e834d7c73a81fe
SSDEEP 3072:FyDvC1u+vOGY2LdnlYS505U7AOiMspw3mkRqer5+ncloOZ4FoVj5gJi:cCc+Gd2LBmpSqer5+nDFo1
TLSH
T17A643B19B6E594D6FAB34E34587087905AF7B8936E20456F25C4338E4CF22E08F25FE2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

File Explorer

2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

.exe 326KB

2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

IMPHASH 93748bcd8307b417457e392dc371dfe1
SHA256 d0df13d7ee924e03285edac1f795f3eb9ded3cc254a0f390812e25c7289ba9d9
MD5 701ffcae6fa7d6d538d4fcf7adeb2b23
SHA1 0921fcdd22b68bb297fb6d59e1f3eb10f3843b5e
SHA512 03e9126eebbe04c98c982c297e9e15844666c3b16c516aeb3a89ffe76aa4b1643a2e073d3b5ce20ed6aa9070dea61874564da5527fc6c56352e834d7c73a81fe
SSDEEP 3072:FyDvC1u+vOGY2LdnlYS505U7AOiMspw3mkRqer5+ncloOZ4FoVj5gJi:cCc+Gd2LBmpSqer5+nDFo1
TLSH
T17A643B19B6E594D6FAB34E34587087905AF7B8936E20456F25C4338E4CF22E08F25FE2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DebugActiveProcess SetProcessAffinityMask SetDefaultCommConfigA GetNumaProcessorNode GetLocaleInfoA CallNamedPipeA InterlockedIncrement MoveFileExW GetConsoleAliasA GlobalSize GetEnvironmentStringsW Process32First GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetTickCount FormatMessageA GetSystemWow64DirectoryW GetConsoleAliasExesLengthW GetStringTypeExW HeapDestroy GetFileAttributesA GetTimeFormatW SetConsoleCursorPosition GetModuleFileNameW GetConsoleFontSize GetACP GetStartupInfoA GetStdHandle GetLogicalDriveStringsA GetProcAddress SetVolumeLabelW MoveFileW VirtualAllocEx BuildCommDCBW LoadLibraryA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCommMask FindAtomA SetNamedPipeHandleState GetModuleHandleA OpenFileMappingW PurgeComm GetVersionExA ReadConsoleOutputCharacterW LocalFileTimeToFileTime CloseHandle WriteConsoleW MultiByteToWideChar GetLastError HeapReAlloc HeapAlloc GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedDecrement GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId Sleep HeapSize ExitProcess DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree HeapFree VirtualAlloc WriteFile GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-12_701ffcae6fa7d6d538d4fcf7adeb2b23_cobalt-strike_elex_icedid_njrat_rhadamanthys_smoke-loader_stealc_stop_tofsee

kernel32

generic