2026-05-06_ea55d3f11b53a0dc6634dbc236f11b18_amadey_cobalt-strike_elex_hijackloader_nymaim_rhadamanthys_smoke-loader

General

Target
2026-05-06_ea55d3f11b53a0dc6634dbc236f11b18_amadey_cobalt-strike_elex_hijackloader_nymaim_rhadamanthys_smoke-loader
Size 408KB
Sample260506-p7ectsfv4p
SHA256 7075cf07048190b08bcd1e3981ec1cf2d3b39a18a4db076da89bd48374ae1ad8
MD5 ea55d3f11b53a0dc6634dbc236f11b18
SHA1 b4232c40ac4267860c60b73aa156b4a818396762
SHA512 e6a77cbe919db22d28a325a81b589415d6043ef520a3d4c6e2306b422880e2a4a3bf129a39f1757573d788fda018aa2da12612ad3b8ee30a8c1872dd410797aa
SSDEEP 6144:wSdZ02dMG8LjAXDZZoWpgP3xzKI2uH8eFm0bLPHys6jJ0OH5iUI:AG8LjAXdZZXeLPSs6jOOH5iUI
TLSH
T175948C13F78644FAD44EC2788B96C632E6B1B8110B21A2DF278447153F6ABE47B3DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-06_ea55d3f11b53a0dc6634dbc236f11b18_amadey_cobalt-strike_elex_hijackloader_nymaim_rhadamanthys_smoke-loader

2026-05-06_ea55d3f11b53a0dc6634dbc236f11b18_amadey_cobalt-strike_elex_hijackloader_nymaim_rhadamanthys_smoke-loader

.exe 408KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 7075cf07048190b08bcd1e3981ec1cf2d3b39a18a4db076da89bd48374ae1ad8
MD5 ea55d3f11b53a0dc6634dbc236f11b18
SHA1 b4232c40ac4267860c60b73aa156b4a818396762
SHA512 e6a77cbe919db22d28a325a81b589415d6043ef520a3d4c6e2306b422880e2a4a3bf129a39f1757573d788fda018aa2da12612ad3b8ee30a8c1872dd410797aa
SSDEEP 6144:wSdZ02dMG8LjAXDZZoWpgP3xzKI2uH8eFm0bLPHys6jJ0OH5iUI:AG8LjAXdZZXeLPSs6jOOH5iUI
TLSH
T175948C13F78644FAD44EC2788B96C632E6B1B8110B21A2DF278447153F6ABE47B3DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths