2026-07-23_aa5c7f82b5f392fce4aa39bcf81c5b73_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys_smoke-loader

General

Target
2026-07-23_aa5c7f82b5f392fce4aa39bcf81c5b73_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys_smoke-loader
Size 498KB
Sample260723-vba87ashmg
SHA256 8b6b420313f72c8d7b2074e26ae0ec9d9b91caeb7e4e026c26b95f70880db645
MD5 aa5c7f82b5f392fce4aa39bcf81c5b73
SHA1 fdea184ccd2cb40e094f25d57506d04ac7b27089
SHA512 0015a08d1592c3baffb7f4a75f607134c711647116ac68ba4958b201a87a9d7484dc76f9ff6920245991da14351d8fa84fffcfa842c7d5764fcebe0d985badc4
SSDEEP 6144:wSdZn2dMG8LjN7TqK8tsp6L6CwUmmTukhIDyjFWR48dSjn8woizz:lG8LjBTqKo5mWukhI2jFMSj9oizz
TLSH
T154B42A167D418032D69109310A25EA6D6739BA24C9934E87B3D46EDEFFF09C28F36276
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_aa5c7f82b5f392fce4aa39bcf81c5b73_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys_smoke-loader

2026-07-23_aa5c7f82b5f392fce4aa39bcf81c5b73_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_redline-stealer_rhadamanthys_smoke-loader

.exe 498KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 8b6b420313f72c8d7b2074e26ae0ec9d9b91caeb7e4e026c26b95f70880db645
MD5 aa5c7f82b5f392fce4aa39bcf81c5b73
SHA1 fdea184ccd2cb40e094f25d57506d04ac7b27089
SHA512 0015a08d1592c3baffb7f4a75f607134c711647116ac68ba4958b201a87a9d7484dc76f9ff6920245991da14351d8fa84fffcfa842c7d5764fcebe0d985badc4
SSDEEP 6144:wSdZn2dMG8LjN7TqK8tsp6L6CwUmmTukhIDyjFWR48dSjn8woizz:lG8LjBTqKo5mWukhI2jFMSj9oizz
TLSH
T154B42A167D418032D69109310A25EA6D6739BA24C9934E87B3D46EDEFFF09C28F36276
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths