2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play
Size 721KB
Sample260718-py3dase17y
SHA256 3f8799ebcc9a629e42730029714e3ab6aff403a91611e14d8db5d9fc15426ee7
MD5 7d0aafc8f7764e5e2447ee7543120d92
SHA1 b002a7dd52bf5876cc77ae32622636ac07c0459c
SHA512 65e95e59df284aa927b07f2ac50a75e7c69dc36b292c1684dead188e88f5acfe41e95994a92cf6a0e9c4773a39e791650adc3bd7af90099403a5ec25281d9c2c
SSDEEP 12288:TaGGhkbXB+3pVlIWFJ1H0iDqKt9FBmTt5m0IdADeU9jz7u:eG/bXBIVl3OSq2PEIdADeU9jz
TLSH
T163F4F00333F4016CF4F36A3119B05325A97EBDB2E961DF6E1B80259D2F35A918960B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play

File Explorer

2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play

.exe 721KB

2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play

IMPHASH 703ff56bdeea42466c9707ed3f98c291
SHA256 3f8799ebcc9a629e42730029714e3ab6aff403a91611e14d8db5d9fc15426ee7
MD5 7d0aafc8f7764e5e2447ee7543120d92
SHA1 b002a7dd52bf5876cc77ae32622636ac07c0459c
SHA512 65e95e59df284aa927b07f2ac50a75e7c69dc36b292c1684dead188e88f5acfe41e95994a92cf6a0e9c4773a39e791650adc3bd7af90099403a5ec25281d9c2c
SSDEEP 12288:TaGGhkbXB+3pVlIWFJ1H0iDqKt9FBmTt5m0IdADeU9jz7u:eG/bXBIVl3OSq2PEIdADeU9jz
TLSH
T163F4F00333F4016CF4F36A3119B05325A97EBDB2E961DF6E1B80259D2F35A918960B7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31241

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

BraveUpdate_unsigned.pdb

advapi32

RegOpenKeyExW

kernel32

SizeofResource HeapFree GetCommandLineW GetModuleFileNameW InitializeCriticalSectionAndSpinCount HeapSize GetLastError GetFileAttributesExW LockResource HeapReAlloc RaiseException FindResourceExW LoadResource FindResourceW HeapAlloc DecodePointer HeapDestroy GetProcAddress DeleteCriticalSection GetProcessHeap GetModuleHandleW FreeLibrary LoadLibraryExW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetLastError RtlUnwind TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer ExitProcess GetModuleHandleExW GetStdHandle WriteFile FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetFileType WriteConsoleW

shell32

SHGetFolderPathW

user32

CharLowerBuffW

shlwapi

SHQueryValueExW PathAppendW PathRemoveFileSpecW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_7d0aafc8f7764e5e2447ee7543120d92_amadey_cobalt-strike_elex_play

advapi32

kernel32

shell32

user32

shlwapi

generic