2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play

General

Target
2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play
Size 81KB
Sample260707-jetn6acx21
SHA256 79f6a1fd7acd95b7d92be560417a8a78e2959d3f48dc7bbf37da49dca5d96f80
MD5 8a3d7918cf2e883a3ba3044738c090b3
SHA1 25990761f7bd967134cf91a487bd6841349e625d
SHA512 c2e139c9a30b6fb4efbd4cd3c462240d4f23ef269ba28cea1ec78d2649944c1be3428f7db6646ae8073b21873f615dacbad9c971486a716128ac116dadd9e673
SSDEEP 1536:8Wce1vF9AkDQx8uWOJTQxIEpd9pQamHuDMD4BsWaIwFocdiLcIQzQ6nR:N1vF9AYw5WkTQxIraeDbDFpiQIQM6nR
TLSH
T1D383490376D1D431E476493258A4AAA29A3FF8345F6A9E7BB784026E4F301C0DE25E77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play

File Explorer

2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play

.exe 81KB

2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play

IMPHASH 9643c9e4303228fdfd223cc806c6f906
SHA256 79f6a1fd7acd95b7d92be560417a8a78e2959d3f48dc7bbf37da49dca5d96f80
MD5 8a3d7918cf2e883a3ba3044738c090b3
SHA1 25990761f7bd967134cf91a487bd6841349e625d
SHA512 c2e139c9a30b6fb4efbd4cd3c462240d4f23ef269ba28cea1ec78d2649944c1be3428f7db6646ae8073b21873f615dacbad9c971486a716128ac116dadd9e673
SSDEEP 1536:8Wce1vF9AkDQx8uWOJTQxIEpd9pQamHuDMD4BsWaIwFocdiLcIQzQ6nR:N1vF9AYw5WkTQxIraeDbDFpiQIQM6nR
TLSH
T1D383490376D1D431E476493258A4AAA29A3FF8345F6A9E7BB784026E4F301C0DE25E77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5179

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle CreateFileW SetFilePointerEx WriteConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LoadLibraryW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW DecodePointer

comctl32

ord17

user32

GetWindowRect SetWindowTextW GetDlgItem EndDialog DialogBoxParamW ScreenToClient SetWindowPos ShowWindow DestroyWindow PostQuitMessage SendMessageW CreateDialogParamW

gdi32

CreateBrushIndirect

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-07_8a3d7918cf2e883a3ba3044738c090b3_amadey_cobalt-strike_elex_floxif_play

kernel32

comctl32

user32

gdi32

generic