2026-08-04_da9211c0f90b2631be5eef1fa0a49c23_cobalt-strike_conti_elex_hijackloader

General

Target
2026-08-04_da9211c0f90b2631be5eef1fa0a49c23_cobalt-strike_conti_elex_hijackloader
Size 742KB
Sample260804-wg88vaef63
SHA256 fcf9312586bae425bc74bce738709fd0a0e8d3da1de11f3a531dcb45879c90df
MD5 da9211c0f90b2631be5eef1fa0a49c23
SHA1 33e956d60d0274177354d8e34ccf409ffecf56e7
SHA512 1c54f0f4a4acb880c9cdcf4d3f5eaf3222d00744ea67934ee3f338b26d64de6a8f1c4640a3aabf468ca44e9ab146804dc57d32d69f1ae855e85574d5fe9f08bf
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSj2Ip:KIifqFu1//IifqFuyDA54GX79lSj2Ip
TLSH
T1E4F48D07F6A244FCC557C17089E69372EA71FC225620AB7F2768E6212F60F906F3A754
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_da9211c0f90b2631be5eef1fa0a49c23_cobalt-strike_conti_elex_hijackloader

2026-08-04_da9211c0f90b2631be5eef1fa0a49c23_cobalt-strike_conti_elex_hijackloader

.exe 742KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 fcf9312586bae425bc74bce738709fd0a0e8d3da1de11f3a531dcb45879c90df
MD5 da9211c0f90b2631be5eef1fa0a49c23
SHA1 33e956d60d0274177354d8e34ccf409ffecf56e7
SHA512 1c54f0f4a4acb880c9cdcf4d3f5eaf3222d00744ea67934ee3f338b26d64de6a8f1c4640a3aabf468ca44e9ab146804dc57d32d69f1ae855e85574d5fe9f08bf
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSj2Ip:KIifqFu1//IifqFuyDA54GX79lSj2Ip
TLSH
T1E4F48D07F6A244FCC557C17089E69372EA71FC225620AB7F2768E6212F60F906F3A754
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths