2026-08-01_7bcc460b38efbccdabaeafddb5f8cb0e_cobalt-strike_conti_elex_hijackloader

General

Target
2026-08-01_7bcc460b38efbccdabaeafddb5f8cb0e_cobalt-strike_conti_elex_hijackloader
Size 742KB
Sample260801-frj4pseb42
SHA256 08dd0b8a2f1ac254f9a6c25493ffa1d5b98751f184b0920f31e25df33ee7e213
MD5 7bcc460b38efbccdabaeafddb5f8cb0e
SHA1 15a56cee7b684cb71c99620d7ff60f8b4898bda7
SHA512 be7fe5f954878193888e46123426ea56d51e27c7b4fa317b445d2a260a6cece5eb3506e56e46e6c1c0b7811fca80202766df3ddc1c91431492b9b7ae7a63748a
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSzQGa:KIifqFu1//IifqFuyDA54GX79lSzQGa
TLSH
T1F8F48D07F6A244FCD517C17089E69372EA71FC225620AB7F2768E6213F60F906F2A754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_7bcc460b38efbccdabaeafddb5f8cb0e_cobalt-strike_conti_elex_hijackloader

2026-08-01_7bcc460b38efbccdabaeafddb5f8cb0e_cobalt-strike_conti_elex_hijackloader

.exe 742KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 08dd0b8a2f1ac254f9a6c25493ffa1d5b98751f184b0920f31e25df33ee7e213
MD5 7bcc460b38efbccdabaeafddb5f8cb0e
SHA1 15a56cee7b684cb71c99620d7ff60f8b4898bda7
SHA512 be7fe5f954878193888e46123426ea56d51e27c7b4fa317b445d2a260a6cece5eb3506e56e46e6c1c0b7811fca80202766df3ddc1c91431492b9b7ae7a63748a
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSzQGa:KIifqFu1//IifqFuyDA54GX79lSzQGa
TLSH
T1F8F48D07F6A244FCD517C17089E69372EA71FC225620AB7F2768E6213F60F906F2A754
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths