2026-04-22_0994ba7d69e33b331f982ea455facb9a_amadey_cobalt-strike_elex_icedid_rhadamanthys_smoke-loader_vidar

General

Target
2026-04-22_0994ba7d69e33b331f982ea455facb9a_amadey_cobalt-strike_elex_icedid_rhadamanthys_smoke-loader_vidar
Size 3.0MB
Sample260422-rcbdsscs41
SHA256 db4fd00359b2bcfdeeca73c179d5ad897c808ffa8efb20c05493105358c96e25
MD5 0994ba7d69e33b331f982ea455facb9a
SHA1 63bbd730429de2bc1489b51dd5af9740ef24a737
SHA512 b8bb7d608ad83e440b1f2741f1a3e35392f92b6c696f15d4e970831e0a4d90d533431afc67530bad299030f1f85de82e9179ab03a01f84dcd1917d430d79b13e
SSDEEP 24576:BCbvtJqc8iHNFpuWvWL0vbxSIa5jcAkSYqyEid4KplkLVC65jcAkSYqyE:BCL2c8MNFLA0vb7ApYqCXp8pYq
TLSH
T153E56B12F7A48575E0738179C9E2A696EA3278511B308BCF1385A27D2F33BD29D35732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-22_0994ba7d69e33b331f982ea455facb9a_amadey_cobalt-strike_elex_icedid_rhadamanthys_smoke-loader_vidar

2026-04-22_0994ba7d69e33b331f982ea455facb9a_amadey_cobalt-strike_elex_icedid_rhadamanthys_smoke-loader_vidar

.exe 3.0MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 db4fd00359b2bcfdeeca73c179d5ad897c808ffa8efb20c05493105358c96e25
MD5 0994ba7d69e33b331f982ea455facb9a
SHA1 63bbd730429de2bc1489b51dd5af9740ef24a737
SHA512 b8bb7d608ad83e440b1f2741f1a3e35392f92b6c696f15d4e970831e0a4d90d533431afc67530bad299030f1f85de82e9179ab03a01f84dcd1917d430d79b13e
SSDEEP 24576:BCbvtJqc8iHNFpuWvWL0vbxSIa5jcAkSYqyEid4KplkLVC65jcAkSYqyE:BCL2c8MNFLA0vb7ApYqCXp8pYq
TLSH
T153E56B12F7A48575E0738179C9E2A696EA3278511B308BCF1385A27D2F33BD29D35732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths