General

  • Target
    2026-07-10_2477d3848cff5e9b0ce9427550e6eca4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
  • Size 4.5MB
  • Sample260710-zl3teabz21
  • SHA256 82f2a37b73f7e4ade7e7918a031c430dfe09b14a010b2922bc349788c7e796e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-07-10_2477d3848cff5e9b0ce9427550e6eca4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_vidar
    .exe 4.5MB

2026-07-10_2477d3848cff5e9b0ce9427550e6eca4_amadey_cobalt-strike_elex_hijackloader_icedid_luca-stealer_njrat_remcos_vidar

  • IMPHASH 5e52bc51aaffc2bc6e4ce7a567e7fdb5
  • SHA256 82f2a37b73f7e4ade7e7918a031c430dfe09b14a010b2922bc349788c7e796e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
5584
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\T\BuildResults\bin\Release\AcroRd32Exe.pdb