2026-06-30_76240c61861e1c7fb9ecd2a844b5d871_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

General

Target
2026-06-30_76240c61861e1c7fb9ecd2a844b5d871_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader
Size 926KB
Sample260701-exldaaes2r
SHA256 4553c467c27e9a37abc7feb4e046341944129e4407f807dc17356b794a4deaf3
MD5 76240c61861e1c7fb9ecd2a844b5d871
SHA1 ae832474e53525dd91706b5a9ca17c65997e64f8
SHA512 5e873af526f9ef4243c547723fe5f484acfe59cd669b2d147c57e3ac553ce559daa05ed3156990d2cad3149f9a4471120fb7652abfda226c4fc43aff3209671b
SSDEEP 12288:pG8LjBTqKb5hGjFlXsvgV5JZKfESPWt0IUyw1QMuVq8mhsqL92jweR+cnq+K:pGw8KybXsIV/w8EZIUywtkmqq5Uwd9
TLSH
T18B1549227B05C171D95040F0AAB99FBB803DBA3807AE54D7A3D46F626564AC37A37F07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_76240c61861e1c7fb9ecd2a844b5d871_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

2026-06-30_76240c61861e1c7fb9ecd2a844b5d871_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

.exe 926KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 4553c467c27e9a37abc7feb4e046341944129e4407f807dc17356b794a4deaf3
MD5 76240c61861e1c7fb9ecd2a844b5d871
SHA1 ae832474e53525dd91706b5a9ca17c65997e64f8
SHA512 5e873af526f9ef4243c547723fe5f484acfe59cd669b2d147c57e3ac553ce559daa05ed3156990d2cad3149f9a4471120fb7652abfda226c4fc43aff3209671b
SSDEEP 12288:pG8LjBTqKb5hGjFlXsvgV5JZKfESPWt0IUyw1QMuVq8mhsqL92jweR+cnq+K:pGw8KybXsIV/w8EZIUywtkmqq5Uwd9
TLSH
T18B1549227B05C171D95040F0AAB99FBB803DBA3807AE54D7A3D46F626564AC37A37F07
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths