2026-06-03_de89228a5b102ee6def6a22a45cca057_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-06-03_de89228a5b102ee6def6a22a45cca057_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 591KB
Sample260603-slyfcsav2x
SHA256 3c759868f657bfb74c45f6850785a98f65b739190cb81aba04e1faab3aa6f572
MD5 de89228a5b102ee6def6a22a45cca057
SHA1 6cd57afa4eec78bb49d6b64a920ffe1d1983c13f
SHA512 8c55b25f1d7335b9b2da5ca4d89577b06c73135ac4af56ddbe9f80d6d6055095a2f561a365cbde50555d8d685de46fe13406676179929254a02156e8247de8f8
SSDEEP 12288:pG8LjBTqKObM/lj1FBghDXZmdgF0RQU8osGo:pGw8KH/B1FBgDXZNFfZog
TLSH
T1B6D4E0067AC2D032D26706305575C6B2AA7EF5311A919B0BA758076E3F306C2DF39F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-03_de89228a5b102ee6def6a22a45cca057_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-06-03_de89228a5b102ee6def6a22a45cca057_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 591KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 3c759868f657bfb74c45f6850785a98f65b739190cb81aba04e1faab3aa6f572
MD5 de89228a5b102ee6def6a22a45cca057
SHA1 6cd57afa4eec78bb49d6b64a920ffe1d1983c13f
SHA512 8c55b25f1d7335b9b2da5ca4d89577b06c73135ac4af56ddbe9f80d6d6055095a2f561a365cbde50555d8d685de46fe13406676179929254a02156e8247de8f8
SSDEEP 12288:pG8LjBTqKObM/lj1FBghDXZmdgF0RQU8osGo:pGw8KH/B1FBgDXZNFfZog
TLSH
T1B6D4E0067AC2D032D26706305575C6B2AA7EF5311A919B0BA758076E3F306C2DF39F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths