2026-08-02_04c9aa3e01620359473dcfd200e9a804_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

General

Target
2026-08-02_04c9aa3e01620359473dcfd200e9a804_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar
Size 1.5MB
Sample260802-yjbfpseh65
SHA256 c9fdedfd35c56592461c64fa01c599c5e2f7380d7fc452101726a5cc8a7e352a
MD5 04c9aa3e01620359473dcfd200e9a804
SHA1 1c55642066b79184be54df8445b472db594fb9d0
SHA512 f36f6b6c78e23f1bcff1abb13878537f6051cbdc7c8f8f2172f8f70e0100d4ddf48e6d1227641c17088b295fba616a8cc9e9539bcf753039e4f58796dcad4ad4
SSDEEP 24576:TuVpEOG+A++bXsIV/p3LutmkEz+PAVV/OOInO4Xs2ztR4iegxLHgZpJE4VDd+D:yrEXD++bXs8butmkO+wAOInO4Xrztygt
TLSH
T16A65BF13EB8050B7D8224230D274B736A77FB5B01B694BDB13982F2A3D616D16E36727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_04c9aa3e01620359473dcfd200e9a804_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

2026-08-02_04c9aa3e01620359473dcfd200e9a804_cobalt-strike_elex_icedid_nymaim_rhadamanthys_stealc_vidar

.exe 1.5MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 c9fdedfd35c56592461c64fa01c599c5e2f7380d7fc452101726a5cc8a7e352a
MD5 04c9aa3e01620359473dcfd200e9a804
SHA1 1c55642066b79184be54df8445b472db594fb9d0
SHA512 f36f6b6c78e23f1bcff1abb13878537f6051cbdc7c8f8f2172f8f70e0100d4ddf48e6d1227641c17088b295fba616a8cc9e9539bcf753039e4f58796dcad4ad4
SSDEEP 24576:TuVpEOG+A++bXsIV/p3LutmkEz+PAVV/OOInO4Xs2ztR4iegxLHgZpJE4VDd+D:yrEXD++bXs8butmkO+wAOInO4Xrztygt
TLSH
T16A65BF13EB8050B7D8224230D274B736A77FB5B01B694BDB13982F2A3D616D16E36727
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths