2026-06-30_d516f0725323d261cf0c604fa92d7a0f_amadey_cobalt-strike_elex_nymaim_rhadamanthys_smoke-loader_vidar

General

Target
2026-06-30_d516f0725323d261cf0c604fa92d7a0f_amadey_cobalt-strike_elex_nymaim_rhadamanthys_smoke-loader_vidar
Size 1.8MB
Sample260701-c3g7psew9s
SHA256 ce792ef9c887a019175b648692edc5a8eddf98eb4d7e9cdee2a89320f5e5d155
MD5 d516f0725323d261cf0c604fa92d7a0f
SHA1 7c848da790dbc66bbee0b525b47fbf42a8b02680
SHA512 650b0a3d38acc603fce0ebb7fd6509de6b52fd87b5a6d85c97d62c5cdd3ef61b635b69089768d977c357659e79d8de75800b3e5d63db361bc295598baaffb265
SSDEEP 49152:ywRaYSDA+ouZ/K0tDmNDbXsPNIULkmp1/u:tRUZ/K0tKNDbXsPN5kiM
TLSH
T1E585AE23FB4581B4D455C0F097A9AA77D439B8280B3D74DB57D09B222A35ED27B3AF02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_d516f0725323d261cf0c604fa92d7a0f_amadey_cobalt-strike_elex_nymaim_rhadamanthys_smoke-loader_vidar

2026-06-30_d516f0725323d261cf0c604fa92d7a0f_amadey_cobalt-strike_elex_nymaim_rhadamanthys_smoke-loader_vidar

.exe 1.8MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 ce792ef9c887a019175b648692edc5a8eddf98eb4d7e9cdee2a89320f5e5d155
MD5 d516f0725323d261cf0c604fa92d7a0f
SHA1 7c848da790dbc66bbee0b525b47fbf42a8b02680
SHA512 650b0a3d38acc603fce0ebb7fd6509de6b52fd87b5a6d85c97d62c5cdd3ef61b635b69089768d977c357659e79d8de75800b3e5d63db361bc295598baaffb265
SSDEEP 49152:ywRaYSDA+ouZ/K0tDmNDbXsPNIULkmp1/u:tRUZ/K0tKNDbXsPN5kiM
TLSH
T1E585AE23FB4581B4D455C0F097A9AA77D439B8280B3D74DB57D09B222A35ED27B3AF02
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths