2026-05-22_be9ac17715f1c65d088b4155d4f76c30_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

General

Target
2026-05-22_be9ac17715f1c65d088b4155d4f76c30_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
Size 3.2MB
Sample260522-e8gjgaev3p
SHA256 15d828d104ba8e5fd14dfc433ad1396571b1fd3586ea4d614bf24e803b6d8af0
MD5 be9ac17715f1c65d088b4155d4f76c30
SHA1 7f7b44f4b69d51c0792b91ca7dafac02505c9594
SHA512 b06ec58b31f33b2c56a042600d4489ae94096efaa8dcef4b7af0c03354a811c9e8dc1bfc1359d5f0c633e4c28cae6fd406c3af02df79b2944c9e358d9341ecb0
SSDEEP 49152:ZeW4SkZP4sz9MbIy6i1zuajsauZnJB1opwBDx00ZI25ta1L1rGc:tfkZcItz5ta1R
TLSH
T146F54B1AB2F847A2D0B7D179C6A29656FA7238511F3087CF0351D72E2F37AD09939722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-22_be9ac17715f1c65d088b4155d4f76c30_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

2026-05-22_be9ac17715f1c65d088b4155d4f76c30_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

.exe 3.2MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 15d828d104ba8e5fd14dfc433ad1396571b1fd3586ea4d614bf24e803b6d8af0
MD5 be9ac17715f1c65d088b4155d4f76c30
SHA1 7f7b44f4b69d51c0792b91ca7dafac02505c9594
SHA512 b06ec58b31f33b2c56a042600d4489ae94096efaa8dcef4b7af0c03354a811c9e8dc1bfc1359d5f0c633e4c28cae6fd406c3af02df79b2944c9e358d9341ecb0
SSDEEP 49152:ZeW4SkZP4sz9MbIy6i1zuajsauZnJB1opwBDx00ZI25ta1L1rGc:tfkZcItz5ta1R
TLSH
T146F54B1AB2F847A2D0B7D179C6A29656FA7238511F3087CF0351D72E2F37AD09939722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

138990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

WsatConfig.pdb