2026-07-28_c33b37c5bab2a2bc01694f277d49b438_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

General

Target
2026-07-28_c33b37c5bab2a2bc01694f277d49b438_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar
Size 759KB
Sample260728-13dfhsap3t
SHA256 6e298839feec3c35fcec2282241a0c16aec249a6dec7f662fb2ea1f3b0d98642
MD5 c33b37c5bab2a2bc01694f277d49b438
SHA1 adb740572261a25a9f1da0f41ef99dcb9160b27c
SHA512 24e56ca87f9021c2d30b283703c2d0b4537376fab14410a8dc0571fbb2a20590368bf67797e3d8271404ec789c8a9c0315202cb70c981f399ab4f272c9275004
SSDEEP 12288:FuV6ElnNMU3G+1KNVR3vDcxtmkshNBnisj:FuVpEOG+AR3LutmkEt
TLSH
T19EF48E53EB8424E7DC228730D260A6306B7BB5F06A958FDF13683F293C656D09E26735
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_c33b37c5bab2a2bc01694f277d49b438_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

2026-07-28_c33b37c5bab2a2bc01694f277d49b438_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

.exe 759KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 6e298839feec3c35fcec2282241a0c16aec249a6dec7f662fb2ea1f3b0d98642
MD5 c33b37c5bab2a2bc01694f277d49b438
SHA1 adb740572261a25a9f1da0f41ef99dcb9160b27c
SHA512 24e56ca87f9021c2d30b283703c2d0b4537376fab14410a8dc0571fbb2a20590368bf67797e3d8271404ec789c8a9c0315202cb70c981f399ab4f272c9275004
SSDEEP 12288:FuV6ElnNMU3G+1KNVR3vDcxtmkshNBnisj:FuVpEOG+AR3LutmkEt
TLSH
T19EF48E53EB8424E7DC228730D260A6306B7BB5F06A958FDF13683F293C656D09E26735
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths