2026-06-04_97e3fb97f117c3b3fa847a4b3ea933ae_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

General

Target
2026-06-04_97e3fb97f117c3b3fa847a4b3ea933ae_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
Size 247KB
Sample260604-qgbppafs21
SHA256 ba6df378838d43e919fcfa5fb634f359944eca261691434d74c3ca398654b719
MD5 97e3fb97f117c3b3fa847a4b3ea933ae
SHA1 db9350c4a805ba6318e51678e09abdd06e604270
SHA512 a9bd0ec16b2dc223beb190f42430beafefa38e3a7d5555a3a6ab578f917d57b1f20b6c5015cbdbdfc075e823c236a85a8d74b9ded8aea74c4bba2b3148dd047c
SSDEEP 6144:7uJWqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:gml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T1D8349E12B5E180B3E9B30D3409F4AE759ABEF9310B158A7F63D84B6D5F30681D226763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-04_97e3fb97f117c3b3fa847a4b3ea933ae_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

2026-06-04_97e3fb97f117c3b3fa847a4b3ea933ae_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

.exe 247KB

SHA256 ba6df378838d43e919fcfa5fb634f359944eca261691434d74c3ca398654b719
MD5 97e3fb97f117c3b3fa847a4b3ea933ae
SHA1 db9350c4a805ba6318e51678e09abdd06e604270
SHA512 a9bd0ec16b2dc223beb190f42430beafefa38e3a7d5555a3a6ab578f917d57b1f20b6c5015cbdbdfc075e823c236a85a8d74b9ded8aea74c4bba2b3148dd047c
SSDEEP 6144:7uJWqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:gml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T1D8349E12B5E180B3E9B30D3409F4AE759ABEF9310B158A7F63D84B6D5F30681D226763
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

188676

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths