2026-08-03_92f0d6a3749556effdf46900abe9b5d6_cobalt-strike_conti_elex_hijackloader

General

Target
2026-08-03_92f0d6a3749556effdf46900abe9b5d6_cobalt-strike_conti_elex_hijackloader
Size 791KB
Sample260804-mvm34atxbx
SHA256 57724dd8f845cf0e6225ac6e586779a805521504e0096fd2b430f513fa90835b
MD5 92f0d6a3749556effdf46900abe9b5d6
SHA1 cc35d3ebfeac44a3ce7c695324dfabcc9ac1f344
SHA512 759fc557a8356132893e92b9d6b4ade1fd507f43de562537746b59489d9f5e3a03c204b2f5b74505fba630bf8125f97d620b3d4e05c5a9429cf04f57f5f11e61
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSsZrZ1IyS:KIifqFu1//IifqFuyDA54GX79lSs1Zuj
TLSH
T131057C06F6A244FCC557813089E69372EB71FC225720ABAF1768E6252F21FD06F3A715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_92f0d6a3749556effdf46900abe9b5d6_cobalt-strike_conti_elex_hijackloader

2026-08-03_92f0d6a3749556effdf46900abe9b5d6_cobalt-strike_conti_elex_hijackloader

.exe 791KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 57724dd8f845cf0e6225ac6e586779a805521504e0096fd2b430f513fa90835b
MD5 92f0d6a3749556effdf46900abe9b5d6
SHA1 cc35d3ebfeac44a3ce7c695324dfabcc9ac1f344
SHA512 759fc557a8356132893e92b9d6b4ade1fd507f43de562537746b59489d9f5e3a03c204b2f5b74505fba630bf8125f97d620b3d4e05c5a9429cf04f57f5f11e61
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSsZrZ1IyS:KIifqFu1//IifqFuyDA54GX79lSs1Zuj
TLSH
T131057C06F6A244FCC557813089E69372EB71FC225720ABAF1768E6252F21FD06F3A715
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths