2026-08-03_1abdb21c1c6b58cd6b899e47fa5c6b75_cobalt-strike_conti_elex_hijackloader

General

Target
2026-08-03_1abdb21c1c6b58cd6b899e47fa5c6b75_cobalt-strike_conti_elex_hijackloader
Size 790KB
Sample260804-dvc4fsvsgz
SHA256 14413fc25b5f1f367eb402e6a19b4c949d8d6ee232b4e7301af3ba19af9433a6
MD5 1abdb21c1c6b58cd6b899e47fa5c6b75
SHA1 b8733a13960f60d2cfaa0d45eecf4e084df13ea2
SHA512 88ce7e7c7f373a1b787efbdada3dd3fface8eace4d600407fdbacff59843341c46384772142e9881b4eb36296e82312ca6b1396bed680748b298fbe1f57cff8d
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSzQpLb:KIifqFu1//IifqFuyDA54GX79lSzQpLb
TLSH
T1FB059E07F6E244BCD517C13089E69372AA71FC225630AB7F2758E6213F21F906F2A759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_1abdb21c1c6b58cd6b899e47fa5c6b75_cobalt-strike_conti_elex_hijackloader

2026-08-03_1abdb21c1c6b58cd6b899e47fa5c6b75_cobalt-strike_conti_elex_hijackloader

.exe 790KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 14413fc25b5f1f367eb402e6a19b4c949d8d6ee232b4e7301af3ba19af9433a6
MD5 1abdb21c1c6b58cd6b899e47fa5c6b75
SHA1 b8733a13960f60d2cfaa0d45eecf4e084df13ea2
SHA512 88ce7e7c7f373a1b787efbdada3dd3fface8eace4d600407fdbacff59843341c46384772142e9881b4eb36296e82312ca6b1396bed680748b298fbe1f57cff8d
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSzQpLb:KIifqFu1//IifqFuyDA54GX79lSzQpLb
TLSH
T1FB059E07F6E244BCD517C13089E69372AA71FC225630AB7F2758E6213F21F906F2A759
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths