2026-08-03_0b7024f704474f66e56c3812669f7dd6_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

General

Target
2026-08-03_0b7024f704474f66e56c3812669f7dd6_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
Size 298KB
Sample260804-d2wjdavvaw
SHA256 de2d043429bc7a1e9da37f269945a03aa86a656bc451497b26f13374f02168c0
MD5 0b7024f704474f66e56c3812669f7dd6
SHA1 9e28b8b34af9c67a1c551fb1c275b97cbee03a5d
SHA512 ae702f6927f383329802296ca35f14488b785122a2242593db60668b26dd02a4714daeba61ba8c80d87f90e44424f37f019fda7c8ebfef9ec027bbf5f0ec14e5
SSDEEP 6144:wlj7cMnd+OEXHGQOF1vf5pS8Vb6IJ6noeL3X8y:wlbd+nXO7vxpS8xPKX8y
TLSH
T175548C41B3E505E4F5B72A348D714616AA777C624B34DB4F03A482AA9F73B80DD39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_0b7024f704474f66e56c3812669f7dd6_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

2026-08-03_0b7024f704474f66e56c3812669f7dd6_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

.exe 298KB

SHA256 de2d043429bc7a1e9da37f269945a03aa86a656bc451497b26f13374f02168c0
MD5 0b7024f704474f66e56c3812669f7dd6
SHA1 9e28b8b34af9c67a1c551fb1c275b97cbee03a5d
SHA512 ae702f6927f383329802296ca35f14488b785122a2242593db60668b26dd02a4714daeba61ba8c80d87f90e44424f37f019fda7c8ebfef9ec027bbf5f0ec14e5
SSDEEP 6144:wlj7cMnd+OEXHGQOF1vf5pS8Vb6IJ6noeL3X8y:wlbd+nXO7vxpS8xPKX8y
TLSH
T175548C41B3E505E4F5B72A348D714616AA777C624B34DB4F03A482AA9F73B80DD39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

104992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths