2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

General

Target
2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry
Size 3.2MB
Sample260415-err9msev3m
SHA256 e956a7e9e418109ee116c5941212d82b3f8f96e001333b3a51b0cfba8fe794cf
MD5 3188a4f56752e93b70a74d9d36a4346a
SHA1 9951f9694db9339d94063031dfa26b660d4c258d
SHA512 721032820f7fdff9a71f060de67afc3f8cf72bc527202b69a97e8c1dbe803682e7f020e2171bfbd47e32272257a81ddd66beb826add1149695881c56482f83a6
SSDEEP 49152:W+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZKCUEzDGcpeapel0:X0oAaldmdmnpZjzEvl0
TLSH
T15BF54903A29548E9D14AD074CE46C232E7627C4D4BF265EF36907ADA3E77AD03B3A714
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

2026-04-15_3188a4f56752e93b70a74d9d36a4346a_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

.exe 3.2MB

IMPHASH a0db151d55761167d93eba72d3d94b32
SHA256 e956a7e9e418109ee116c5941212d82b3f8f96e001333b3a51b0cfba8fe794cf
MD5 3188a4f56752e93b70a74d9d36a4346a
SHA1 9951f9694db9339d94063031dfa26b660d4c258d
SHA512 721032820f7fdff9a71f060de67afc3f8cf72bc527202b69a97e8c1dbe803682e7f020e2171bfbd47e32272257a81ddd66beb826add1149695881c56482f83a6
SSDEEP 49152:W+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyZKCUEzDGcpeapel0:X0oAaldmdmnpZjzEvl0
TLSH
T15BF54903A29548E9D14AD074CE46C232E7627C4D4BF265EF36907ADA3E77AD03B3A714
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

10742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths