General

  • Target
    2026-08-05_ef13406546625b5f1d07ae2572459875_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
  • Size 519KB
  • Sample260805-c69fcscc85
  • SHA256 168b850fd445d307ac78b38caad2efc1a045e5a0b772c10cbe6428ba24d4731c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-08-05_ef13406546625b5f1d07ae2572459875_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat
    .exe 519KB

2026-08-05_ef13406546625b5f1d07ae2572459875_amadey_cobalt-strike_elex_glassworm_hijackloader_luca-stealer_lynx_njrat

  • IMPHASH f35183b7bcfb974393bca9c6ed186f13
  • SHA256 168b850fd445d307ac78b38caad2efc1a045e5a0b772c10cbe6428ba24d4731c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
246537
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Boo\Code\_Offergate\YandexInstaller\Build-Win32-Release\YandexInstaller.pdb