2026-07-21_93f4307966b5a56babb5a53e50043d9b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-07-21_93f4307966b5a56babb5a53e50043d9b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 352KB
Sample260721-vg366acg89
SHA256 65b389ef46bc2b0589d39612180e8365234afb22fed72d79401912a3fedeee82
MD5 93f4307966b5a56babb5a53e50043d9b
SHA1 58424d681889dc74ef7234856da8a11b212927d0
SHA512 cfe6d8528322766380df707f190dfb82150ccdba8b98344f810f786bd1d876f86ab3177320dd109bd6cb9f80e3a25b8999518350dcdc26c25a9cc57bc28f929c
SSDEEP 6144:wSdZF2dMG8LjN7TqK8tsp6YsI4M/3lvj1FWP6gQA7PW7iOz8:DG8LjBTqKObM/lj1FBghDXJ
TLSH
T18B74C006BAC1C072D43A053A0974CA75AB7EF5310EA15B0F67480BAE6F345D29E37F66
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-21_93f4307966b5a56babb5a53e50043d9b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-07-21_93f4307966b5a56babb5a53e50043d9b_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 352KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 65b389ef46bc2b0589d39612180e8365234afb22fed72d79401912a3fedeee82
MD5 93f4307966b5a56babb5a53e50043d9b
SHA1 58424d681889dc74ef7234856da8a11b212927d0
SHA512 cfe6d8528322766380df707f190dfb82150ccdba8b98344f810f786bd1d876f86ab3177320dd109bd6cb9f80e3a25b8999518350dcdc26c25a9cc57bc28f929c
SSDEEP 6144:wSdZF2dMG8LjN7TqK8tsp6YsI4M/3lvj1FWP6gQA7PW7iOz8:DG8LjBTqKObM/lj1FBghDXJ
TLSH
T18B74C006BAC1C072D43A053A0974CA75AB7EF5310EA15B0F67480BAE6F345D29E37F66
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths