2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar

General

Target
2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar
Size 1.7MB
Sample260419-smlsysay7w
SHA256 d6d2c103debc0406d3cd3def888a5bf98f33934243791a34e211b94dcac8f6d2
MD5 accf3737950338fe3c1b206f51467e92
SHA1 c6132cfd2b9eda6075f514607c4df5b2601427ea
SHA512 3d08b18927caf221629fb7c785376480599164fb869c348bc502bcdd2982cdc85f41f59dead92b045506a94ffb9b3a4b430e0ed95ad903c9f841451b91264b46
SSDEEP 24576:uWvWL0vbxSIWD5TvinrmpErQe35tauKf91R:hA0vb7w56rv5ta1LR
TLSH
T119858C5572984FB5D16F42748A618961EA77BC214F209BCF03D0BEBE3E376806D2E217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar

File Explorer

2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar

.exe 1.7MB

2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar

IMPHASH 75e7fb7458b2e2dd8c3b4d1f0020fc10
SHA256 d6d2c103debc0406d3cd3def888a5bf98f33934243791a34e211b94dcac8f6d2
MD5 accf3737950338fe3c1b206f51467e92
SHA1 c6132cfd2b9eda6075f514607c4df5b2601427ea
SHA512 3d08b18927caf221629fb7c785376480599164fb869c348bc502bcdd2982cdc85f41f59dead92b045506a94ffb9b3a4b430e0ed95ad903c9f841451b91264b46
SSDEEP 24576:uWvWL0vbxSIWD5TvinrmpErQe35tauKf91R:hA0vb7w56rv5ta1LR
TLSH
T119858C5572984FB5D16F42748A618961EA77BC214F209BCF03D0BEBE3E376806D2E217
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9451

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\builds\moz2_slave\rel-m-rel-w32_bld-000000000000\build\obj-firefox\browser\app\firefox.pdb

kernel32

GetEnvironmentVariableW GetProcessIoCounters FreeLibrary SetDllDirectoryW VerSetConditionMask GetCurrentProcess SetEnvironmentVariableW GetModuleHandleW WideCharToMultiByte LoadLibraryW GetFileAttributesW VerifyVersionInfoA GetModuleFileNameW MultiByteToWideChar FlushInstructionCache GetProcAddress VirtualProtectEx VirtualAllocEx GetModuleHandleA LoadLibraryExA ExpandEnvironmentStringsW LoadLibraryExW SetFilePointerEx ReadFile CreateFileW CloseHandle IsDebuggerPresent RaiseException GetLastError GetCommandLineW EncodePointer DecodePointer IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentThreadId ExitProcess GetModuleHandleExW GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapSize RtlUnwind HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree HeapAlloc SetStdHandle OutputDebugStringW GetStringTypeW CompareStringW LCMapStringW GetConsoleCP GetConsoleMode HeapReAlloc SetEnvironmentVariableA ReadConsoleW FlushFileBuffers WriteConsoleW SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-19_accf3737950338fe3c1b206f51467e92_cobalt-strike_elex_hijackloader_icedid_maze_njrat_rhadamanthys_smoke-loader_vidar

kernel32

generic