2026-07-06_e70978228cec91c7b6d34a06f37e49ca_cobalt-strike_elex_icedid_nymaim_rhadamanthys_vidar

General

Target
2026-07-06_e70978228cec91c7b6d34a06f37e49ca_cobalt-strike_elex_icedid_nymaim_rhadamanthys_vidar
Size 536KB
Sample260707-alezxaes7z
SHA256 bf563523a3fc6becb185333d6a6661160ddbde8658d62a94d33ae4bdf0d82be3
MD5 e70978228cec91c7b6d34a06f37e49ca
SHA1 764abe148654698912ab82db67e21e8394583736
SHA512 fd7916d6d1ff01c4a8ed882eef342ea13bc55c2f1edcc7663d6d20bcc82b3291cc88582ccbd9ddaaab1d27a402ba8f8318bdd10225220cdb00a621bf94f9d4ae
SSDEEP 6144:QSdZOBieqROUTxxIXB0iS0GaYApLhTrKUfdOtvHtKrr4Kdyj7XKUTa8m23d7KJq9:QBrFUtNL8YcL5YHaI7XHgZQKhfR1Bs
TLSH
T160C4D017B6D16DF2F1138234C4652535E37BB0368E62876B0BA0CF692D277E14E3AB91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_e70978228cec91c7b6d34a06f37e49ca_cobalt-strike_elex_icedid_nymaim_rhadamanthys_vidar

2026-07-06_e70978228cec91c7b6d34a06f37e49ca_cobalt-strike_elex_icedid_nymaim_rhadamanthys_vidar

.exe 536KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 bf563523a3fc6becb185333d6a6661160ddbde8658d62a94d33ae4bdf0d82be3
MD5 e70978228cec91c7b6d34a06f37e49ca
SHA1 764abe148654698912ab82db67e21e8394583736
SHA512 fd7916d6d1ff01c4a8ed882eef342ea13bc55c2f1edcc7663d6d20bcc82b3291cc88582ccbd9ddaaab1d27a402ba8f8318bdd10225220cdb00a621bf94f9d4ae
SSDEEP 6144:QSdZOBieqROUTxxIXB0iS0GaYApLhTrKUfdOtvHtKrr4Kdyj7XKUTa8m23d7KJq9:QBrFUtNL8YcL5YHaI7XHgZQKhfR1Bs
TLSH
T160C4D017B6D16DF2F1138234C4652535E37BB0368E62876B0BA0CF692D277E14E3AB91
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths