2026-07-04_72ddd1b928cc6e9e39322ede00ab6e80_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry

General

Target
2026-07-04_72ddd1b928cc6e9e39322ede00ab6e80_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry
Size 971KB
Sample260704-eynvssaz8x
SHA256 eda16260a7dd7aadd27d0ffb1352db3928932e056bc5ecb2296fcd4674aa744d
MD5 72ddd1b928cc6e9e39322ede00ab6e80
SHA1 1bd5e10cdd74cf330f97202149321a35ed9cfa77
SHA512 98069748b6f28b6be2246d433160bb873e1329069b9b8c7df0720d657a186b0665de272becb88ab00264e768c374f23cb6a59cc0e4b8a7fc7c00c99e709682aa
SSDEEP 24576:KIifqFu1//IifqFuyDA54GX79liTWaLl3z0zDZoc:WqFgqFUHaT1Lljq
TLSH
T1B7259F56F3A204FCD557813489A69332EA71FC250630DB6F13A8F6262F33B906E3A755
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_72ddd1b928cc6e9e39322ede00ab6e80_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry

2026-07-04_72ddd1b928cc6e9e39322ede00ab6e80_amadey_cobalt-strike_conti_elex_hijackloader_icedid_njrat_vidar_wannacry

.exe 971KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 eda16260a7dd7aadd27d0ffb1352db3928932e056bc5ecb2296fcd4674aa744d
MD5 72ddd1b928cc6e9e39322ede00ab6e80
SHA1 1bd5e10cdd74cf330f97202149321a35ed9cfa77
SHA512 98069748b6f28b6be2246d433160bb873e1329069b9b8c7df0720d657a186b0665de272becb88ab00264e768c374f23cb6a59cc0e4b8a7fc7c00c99e709682aa
SSDEEP 24576:KIifqFu1//IifqFuyDA54GX79liTWaLl3z0zDZoc:WqFgqFUHaT1Lljq
TLSH
T1B7259F56F3A204FCD557813489A69332EA71FC250630DB6F13A8F6262F33B906E3A755
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths