2026-07-18_9336b13a548bf1b186fcad4a07a6bac3_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-07-18_9336b13a548bf1b186fcad4a07a6bac3_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 3.9MB
Sample260718-mxcedacs6s
SHA256 bae453707c560f74fea569dd318d45877b40486de579c442db587cadc3f75783
MD5 9336b13a548bf1b186fcad4a07a6bac3
SHA1 47dc3d015206c156946e563de79beb9475da1ae2
SHA512 b3ea770ca18e53cdcb17fed0b4c0a6e00741a4d52f78df68374ceb32e3a1b68fdfece4aa6411c4e75e9c2d96da0752ac1ace60111a04f8f3ef9608b2df93e082
SSDEEP 49152:4gnTVO4rOO53RTqtihhbuRKwpBu56raRBhTn+Pji0Ajt56rapYq:u4rOO53BHerq3wjoCra6
TLSH
T127163911B6A44B71D0B79174C9A2965EEA723C418F328FCB0284AEAD7F736D18D35732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_9336b13a548bf1b186fcad4a07a6bac3_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-07-18_9336b13a548bf1b186fcad4a07a6bac3_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 3.9MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 bae453707c560f74fea569dd318d45877b40486de579c442db587cadc3f75783
MD5 9336b13a548bf1b186fcad4a07a6bac3
SHA1 47dc3d015206c156946e563de79beb9475da1ae2
SHA512 b3ea770ca18e53cdcb17fed0b4c0a6e00741a4d52f78df68374ceb32e3a1b68fdfece4aa6411c4e75e9c2d96da0752ac1ace60111a04f8f3ef9608b2df93e082
SSDEEP 49152:4gnTVO4rOO53RTqtihhbuRKwpBu56raRBhTn+Pji0Ajt56rapYq:u4rOO53BHerq3wjoCra6
TLSH
T127163911B6A44B71D0B79174C9A2965EEA723C418F328FCB0284AEAD7F736D18D35732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths