2026-08-05_c7f468534e6facc950ca8b1eac8c9220_agent-tesla_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar

General

Target
2026-08-05_c7f468534e6facc950ca8b1eac8c9220_agent-tesla_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar
Size 2.7MB
Sample260805-v3j1each22
SHA256 073c7268d15e6ef0692fd823dc76177c4f4d870cb4fb2b843b9bd0ae96f4a5d0
MD5 c7f468534e6facc950ca8b1eac8c9220
SHA1 224dfb78c265a8b3f06250c2043cea3d3c7cf278
SHA512 e483a5fbd8b32cf9672d90f1f6064a6da122d097784f0404f2ba3c9acb4d749e481731db71c62b980b4b107796e763ff7197bd6c0e55956de27b16b39538e0f6
SSDEEP 49152:P/a++6AqSPyC+NltpScpzbtvpJoMQSq/jrQaSq/a++6AqSPyC+NltpScpzbtvpJX:PvSktbpMvSktbpX
TLSH
T199D54C05E3944199EA6FE172D716C617F273780903F2965F02E4EA7D2F326611AEE323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_c7f468534e6facc950ca8b1eac8c9220_agent-tesla_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar

2026-08-05_c7f468534e6facc950ca8b1eac8c9220_agent-tesla_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_stealc_vidar

.exe 2.7MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 073c7268d15e6ef0692fd823dc76177c4f4d870cb4fb2b843b9bd0ae96f4a5d0
MD5 c7f468534e6facc950ca8b1eac8c9220
SHA1 224dfb78c265a8b3f06250c2043cea3d3c7cf278
SHA512 e483a5fbd8b32cf9672d90f1f6064a6da122d097784f0404f2ba3c9acb4d749e481731db71c62b980b4b107796e763ff7197bd6c0e55956de27b16b39538e0f6
SSDEEP 49152:P/a++6AqSPyC+NltpScpzbtvpJoMQSq/jrQaSq/a++6AqSPyC+NltpScpzbtvpJX:PvSktbpMvSktbpX
TLSH
T199D54C05E3944199EA6FE172D716C617F273780903F2965F02E4EA7D2F326611AEE323
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths