2026-08-04_e103190ac2851a54712149fcf59209c8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

General

Target
2026-08-04_e103190ac2851a54712149fcf59209c8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar
Size 1.7MB
Sample260804-q58pbsythx
SHA256 efbc283209f599d34702de175023f7f68a97ab1fc5b9340606dd509e0f6048c4
MD5 e103190ac2851a54712149fcf59209c8
SHA1 1b676fd00d358bbd17a1c1897a8487dc09163215
SHA512 dd718ede5e36d8b3d2c8d937f718bb9d66472d8e3cb630612cd61e5e6c16d7b76f39b53ec1b0349518c6173ed33e3778f8faf402840ebac99281b6a6220cdc3b
SSDEEP 24576:KIifqFu1//IifqFuyDA54GX79lSwczygIifqFu1//IifqFuyDA54GX79lSwczy7:WqFgqFUHcXqFgqFUHcs
TLSH
T122857D07F6A214FCC557813089A69372EB71FC225720AB7F2768E6352F21B906F3A754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_e103190ac2851a54712149fcf59209c8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

2026-08-04_e103190ac2851a54712149fcf59209c8_cobalt-strike_elex_hijackloader_icedid_njrat_vidar

.exe 1.7MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 efbc283209f599d34702de175023f7f68a97ab1fc5b9340606dd509e0f6048c4
MD5 e103190ac2851a54712149fcf59209c8
SHA1 1b676fd00d358bbd17a1c1897a8487dc09163215
SHA512 dd718ede5e36d8b3d2c8d937f718bb9d66472d8e3cb630612cd61e5e6c16d7b76f39b53ec1b0349518c6173ed33e3778f8faf402840ebac99281b6a6220cdc3b
SSDEEP 24576:KIifqFu1//IifqFuyDA54GX79lSwczygIifqFu1//IifqFuyDA54GX79lSwczy7:WqFgqFUHcXqFgqFUHcs
TLSH
T122857D07F6A214FCC557813089A69372EB71FC225720AB7F2768E6352F21B906F3A754
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths