2026-05-23_7a1c62fb7b81898d9460e1e87b31ca48_amadey_cobalt-strike_darkgate_elex_hijackloader_smoke-loader_stop_vidar

General

Target
2026-05-23_7a1c62fb7b81898d9460e1e87b31ca48_amadey_cobalt-strike_darkgate_elex_hijackloader_smoke-loader_stop_vidar
Size 3.3MB
Sample260523-vbml8agz41
SHA256 45e2645ebee2eba17a3b4b2e2c21e69f1e67533fda5bd421b8674a6465343330
MD5 7a1c62fb7b81898d9460e1e87b31ca48
SHA1 f3268c63acb22293ce9ccfb2a137b7bc334d4d59
SHA512 9638b7a7917e414ac63d7be730b2a2d1e58c86aaf57e26fffa045b4887b5c39853b105e51f15c902eb664189c0337392fe857d942d85c0da6e6156fe5b69e142
SSDEEP 49152:+IiIdXn1d3So72nMbz2hKPgssSt2gTPji0Ajd:BXnh7D2hv7Stdjoh
TLSH
T1C2F52911A6E84125ECBE5E7089B1A271F9727C6F7F3DB2CB2E80725A19736C09535323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-23_7a1c62fb7b81898d9460e1e87b31ca48_amadey_cobalt-strike_darkgate_elex_hijackloader_smoke-loader_stop_vidar

2026-05-23_7a1c62fb7b81898d9460e1e87b31ca48_amadey_cobalt-strike_darkgate_elex_hijackloader_smoke-loader_stop_vidar

.exe 3.3MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 45e2645ebee2eba17a3b4b2e2c21e69f1e67533fda5bd421b8674a6465343330
MD5 7a1c62fb7b81898d9460e1e87b31ca48
SHA1 f3268c63acb22293ce9ccfb2a137b7bc334d4d59
SHA512 9638b7a7917e414ac63d7be730b2a2d1e58c86aaf57e26fffa045b4887b5c39853b105e51f15c902eb664189c0337392fe857d942d85c0da6e6156fe5b69e142
SSDEEP 49152:+IiIdXn1d3So72nMbz2hKPgssSt2gTPji0Ajd:BXnh7D2hv7Stdjoh
TLSH
T1C2F52911A6E84125ECBE5E7089B1A271F9727C6F7F3DB2CB2E80725A19736C09535323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

155390

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ComSvcConfig.pdb