2026-07-23_bcc8899d5cc1475a2f9cfc6433015537_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-07-23_bcc8899d5cc1475a2f9cfc6433015537_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 553KB
Sample260723-vadmxsshke
SHA256 e668a52ae5ae887211f98399d247b32c88962aa55ea46ed8fd4687697ad2f3db
MD5 bcc8899d5cc1475a2f9cfc6433015537
SHA1 77a7022e523fbda02190c85d62b193a846ac2191
SHA512 886e562dcee8824dea0b9b3f64439390ff0be0ab780a6f9e3b1e23a120aa60a5a8d89a675bfc11a91e3355775c14ceaafab5be284c886386bc96f3af99271a8f
SSDEEP 12288:pG8LjBTqKo5mWukhI2jFMSjd4OUtNUbTvSUx4:pGw8Ko5mWpI2jFMWJBSU6
TLSH
T17CC47C37BD60ECF2C7BA09751A51C600A77AB5300B91D7CBD3A4861EAF235D14F3A926
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_bcc8899d5cc1475a2f9cfc6433015537_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-07-23_bcc8899d5cc1475a2f9cfc6433015537_amadey_cobalt-strike_elex_glassworm_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 553KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 e668a52ae5ae887211f98399d247b32c88962aa55ea46ed8fd4687697ad2f3db
MD5 bcc8899d5cc1475a2f9cfc6433015537
SHA1 77a7022e523fbda02190c85d62b193a846ac2191
SHA512 886e562dcee8824dea0b9b3f64439390ff0be0ab780a6f9e3b1e23a120aa60a5a8d89a675bfc11a91e3355775c14ceaafab5be284c886386bc96f3af99271a8f
SSDEEP 12288:pG8LjBTqKo5mWukhI2jFMSjd4OUtNUbTvSUx4:pGw8Ko5mWpI2jFMWJBSU6
TLSH
T17CC47C37BD60ECF2C7BA09751A51C600A77AB5300B91D7CBD3A4861EAF235D14F3A926
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths