Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    19/04/2026, 14:40

General

  • Target
    2026-04-19_8bca1b6590256fb7b65dbf0b8e33ad02_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe
  • Size 1.7MB
  • Sample260419-r2dkfsas3x
  • SHA256 9a37f49ed646bc3c3efdd517d70b91118fae6d95d95260201d360f8b264d2ded
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-04-19_8bca1b6590256fb7b65dbf0b8e33ad02_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-04-19_8bca1b6590256fb7b65dbf0b8e33ad02_amadey_cobalt-strike_elex_hijackloader_rhadamanthys_smoke-loader_vidar.exe"
    1⤵
      PID:4800

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/4800-0-0x00007FFF4B2F5000-0x00007FFF4B2F6000-memory.dmp

          memory/4800-1-0x0000000001140000-0x0000000001160000-memory.dmp

          memory/4800-3-0x000000001BF10000-0x000000001C4CA000-memory.dmp

          memory/4800-2-0x00007FFF4B040000-0x00007FFF4B9E1000-memory.dmp

          memory/4800-4-0x00000000011E0000-0x00000000011FE000-memory.dmp

          memory/4800-5-0x000000001CC30000-0x000000001D0FE000-memory.dmp

          memory/4800-6-0x000000001D100000-0x000000001D19C000-memory.dmp

          memory/4800-7-0x00007FFF4B040000-0x00007FFF4B9E1000-memory.dmp

          memory/4800-8-0x00007FFF4B040000-0x00007FFF4B9E1000-memory.dmp

          memory/4800-9-0x00007FFF4B040000-0x00007FFF4B9E1000-memory.dmp

          memory/4800-10-0x00000000010D0000-0x00000000010DC000-memory.dmp

          memory/4800-11-0x00007FFF4B2F5000-0x00007FFF4B2F6000-memory.dmp

          memory/4800-13-0x00000000010D0000-0x00000000010DC000-memory.dmp

          memory/4800-14-0x00007FFF4B040000-0x00007FFF4B9E1000-memory.dmp