2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar

General

Target
2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar
Size 3.0MB
Sample260630-e29lnsev9t
SHA256 2b439f43b95c2ebf6eba03ae457f6ae61cd4ec7d042e971f09a1bd11c1903fdb
MD5 b821cda1e782c0abbc67de7e6b7bd264
SHA1 5c2cedea33094679d429c0136aa267faaac42707
SHA512 e445c3b1d54e32c9f111120cc39784f400a002ac0f57951f6de0e9fe9c11ae5c2ba6e9ddb9775336284a2355736538ae3d92a6028e34be57fc0eff2ae8be7708
SSDEEP 49152:C7KxEkhWF+P5tmfGAWLSzeW0ayGPeXGGmJ7kgkqjV:S+PBpi9hkgkqjV
TLSH
T16DE58C62A24C42EDD81AC17482774B31AD617E4537256EFF07687A662F33AE40F3B712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar

2026-06-29_b821cda1e782c0abbc67de7e6b7bd264_cobalt-strike_elex_glassworm_icedid_njrat_vidar

.exe 3.0MB

SHA256 2b439f43b95c2ebf6eba03ae457f6ae61cd4ec7d042e971f09a1bd11c1903fdb
MD5 b821cda1e782c0abbc67de7e6b7bd264
SHA1 5c2cedea33094679d429c0136aa267faaac42707
SHA512 e445c3b1d54e32c9f111120cc39784f400a002ac0f57951f6de0e9fe9c11ae5c2ba6e9ddb9775336284a2355736538ae3d92a6028e34be57fc0eff2ae8be7708
SSDEEP 49152:C7KxEkhWF+P5tmfGAWLSzeW0ayGPeXGGmJ7kgkqjV:S+PBpi9hkgkqjV
TLSH
T16DE58C62A24C42EDD81AC17482774B31AD617E4537256EFF07687A662F33AE40F3B712
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths