2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 628KB
Sample260604-tmsryabs8m
SHA256 0f9a8f14660021c88fd83c931034a3445121b3a0cce2a520958a9e11a2b9eadd
MD5 ac56ee77a879bae3fac8eb6520a8bd65
SHA1 4fdba45151ad22fa9dbb850b799c80707a18068c
SHA512 e966477694e3db6248e7252ffba27ca32163691dd3e26bcef51f0934766c64cee32a7af26bcbd871bb6073792e67c362405c84501c4378314b71bd6b7a665f16
SSDEEP 12288:27+abaH91qiMmmDhu9sx/RElA0iW6YoFdr1vhJizNPoCNsKLQdxG:27LsqiMmmDhu9sx/RElA0iW6hBhJiRHT
TLSH
T182D48D1AB7D401F9E07BD138C8929666F7B1740617308B9F13A0467B2F676A19F3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-06-04_ac56ee77a879bae3fac8eb6520a8bd65_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 628KB

SHA256 0f9a8f14660021c88fd83c931034a3445121b3a0cce2a520958a9e11a2b9eadd
MD5 ac56ee77a879bae3fac8eb6520a8bd65
SHA1 4fdba45151ad22fa9dbb850b799c80707a18068c
SHA512 e966477694e3db6248e7252ffba27ca32163691dd3e26bcef51f0934766c64cee32a7af26bcbd871bb6073792e67c362405c84501c4378314b71bd6b7a665f16
SSDEEP 12288:27+abaH91qiMmmDhu9sx/RElA0iW6YoFdr1vhJizNPoCNsKLQdxG:27LsqiMmmDhu9sx/RElA0iW6hBhJiRHT
TLSH
T182D48D1AB7D401F9E07BD138C8929666F7B1740617308B9F13A0467B2F676A19F3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths