2026-07-18_35bc8c0370aa54c355a93dcd84999454_amadey_cobalt-strike_elex_hijackloader_wannacry

General

Target
2026-07-18_35bc8c0370aa54c355a93dcd84999454_amadey_cobalt-strike_elex_hijackloader_wannacry
Size 1.9MB
Sample260718-npme2sdt2w
SHA256 5749834f04b84ea1d8bf0f1009cc00b5f280f36333da36fb5c453b1713803bc8
MD5 35bc8c0370aa54c355a93dcd84999454
SHA1 b65d85f892abd92f0dd7e3c3662ead0d5192e08b
SHA512 c3737769e3755b31bf2cfc51828c6ca4fafe4618e83caa080b66ac1fddb1421d05a016faf2756224c0e303d37c39ada7973508ff7b1b5c296a3be7ec8d0801fb
SSDEEP 24576:J//IifqFuyDA54GX79l5jcAkSYqyEVaEv//IifqFuyDA54GX79l5jcAkSYqyEVaE:9qFUH1pYqtqFUH1pYq
TLSH
T1CE955A16F6608679D073C075C9E2A7B6EA31384547309BDF1385E7382F23BE59A3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_35bc8c0370aa54c355a93dcd84999454_amadey_cobalt-strike_elex_hijackloader_wannacry

2026-07-18_35bc8c0370aa54c355a93dcd84999454_amadey_cobalt-strike_elex_hijackloader_wannacry

.exe 1.9MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 5749834f04b84ea1d8bf0f1009cc00b5f280f36333da36fb5c453b1713803bc8
MD5 35bc8c0370aa54c355a93dcd84999454
SHA1 b65d85f892abd92f0dd7e3c3662ead0d5192e08b
SHA512 c3737769e3755b31bf2cfc51828c6ca4fafe4618e83caa080b66ac1fddb1421d05a016faf2756224c0e303d37c39ada7973508ff7b1b5c296a3be7ec8d0801fb
SSDEEP 24576:J//IifqFuyDA54GX79l5jcAkSYqyEVaEv//IifqFuyDA54GX79l5jcAkSYqyEVaE:9qFUH1pYqtqFUH1pYq
TLSH
T1CE955A16F6608679D073C075C9E2A7B6EA31384547309BDF1385E7382F23BE59A3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths