2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 3.5MB
Sample260728-ges2hsbr3z
SHA256 0c19778a81c08642387ebba39a4a643360a17fd6fb9dff25cf7b927a41b07ac8
MD5 81853335bf8af161921cf4f834672fa0
SHA1 33ddb30d273d9da8919c7f448ad663d2fc15eae0
SHA512 5efadd85aed34ef7c75ddbfadf383d101619e2f730775098558594d4844a080b030b1774214b8c9bf022746fd45f2fd34f8245890a1caa8ba84af47e40d0ab1a
SSDEEP 49152:nj9LxcO4Q5Yb0JsSfE40N54/7t0iDHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYIOSfE4Ai/oAaldmdmnpp
TLSH
T125F56A13B29544E9D15AC074CE4A9236D721BC5D4BF266FB3280FADA2E73AD03B39711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-07-28_81853335bf8af161921cf4f834672fa0_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 3.5MB

SHA256 0c19778a81c08642387ebba39a4a643360a17fd6fb9dff25cf7b927a41b07ac8
MD5 81853335bf8af161921cf4f834672fa0
SHA1 33ddb30d273d9da8919c7f448ad663d2fc15eae0
SHA512 5efadd85aed34ef7c75ddbfadf383d101619e2f730775098558594d4844a080b030b1774214b8c9bf022746fd45f2fd34f8245890a1caa8ba84af47e40d0ab1a
SSDEEP 49152:nj9LxcO4Q5Yb0JsSfE40N54/7t0iDHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYIOSfE4Ai/oAaldmdmnpp
TLSH
T125F56A13B29544E9D15AC074CE4A9236D721BC5D4BF266FB3280FADA2E73AD03B39711
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths