2026-04-16_6330ec133025ca17326c1b44483c1c5c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

General

Target
2026-04-16_6330ec133025ca17326c1b44483c1c5c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar
Size 2.0MB
Sample260416-hsshkscx4x
SHA256 7958f5e98ffea39af2047034bb7a11146d3e9a8e0e6d7346b998e0fb78c35380
MD5 6330ec133025ca17326c1b44483c1c5c
SHA1 4f2b92ba7865251591717ab720f8aac32300257d
SHA512 96c4ff9b3fe46a9a49f96f3148f91ccf97ed99c3ef268bf4f9640321c672ce925067a81ad86e97df150204afd6d3d68cab7b8825f6b59af9ae264ca874f6b8c2
SSDEEP 49152:DGKC9RaYSDA+ouZ/K0tDmNhJXLkZRJ+0Y8TCr:y9RUZ/K0tKNhJXKsdr
TLSH
T181957B17F68501E8D06EC2788B46A532EA72BC550F35B6DF0790B7162E77AE06B3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-16_6330ec133025ca17326c1b44483c1c5c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

2026-04-16_6330ec133025ca17326c1b44483c1c5c_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

.exe 2.0MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 7958f5e98ffea39af2047034bb7a11146d3e9a8e0e6d7346b998e0fb78c35380
MD5 6330ec133025ca17326c1b44483c1c5c
SHA1 4f2b92ba7865251591717ab720f8aac32300257d
SHA512 96c4ff9b3fe46a9a49f96f3148f91ccf97ed99c3ef268bf4f9640321c672ce925067a81ad86e97df150204afd6d3d68cab7b8825f6b59af9ae264ca874f6b8c2
SSDEEP 49152:DGKC9RaYSDA+ouZ/K0tDmNhJXLkZRJ+0Y8TCr:y9RUZ/K0tKNhJXKsdr
TLSH
T181957B17F68501E8D06EC2788B46A532EA72BC550F35B6DF0790B7162E77AE06B3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths