2026-08-05_7dc0d35cf00589af76b8dbf43d953bd4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar

General

Target
2026-08-05_7dc0d35cf00589af76b8dbf43d953bd4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar
Size 4.7MB
Sample260805-wsrg6sshkc
SHA256 f4ea26be784f153666bdd807507ae2d0331f7705e8de724eb89a8912a240f4e2
MD5 7dc0d35cf00589af76b8dbf43d953bd4
SHA1 c64b1d975bb6468f053ed42479ed06326e6c9774
SHA512 c1cf2e69aefd58d57f5de0aebaea82e21ba994c896b22ed5778d1bb81576ae270fd2acea09f59d79929b2f42abbb8c0f2fe9676d688209453c6a9f9a19b52e96
SSDEEP 49152:P/aZCzv/aZCziTWnMOHYw+Qj/aZCzv/aZCziTWnMOHYw+QyB:P2w2ZTmMODj2w2ZTmMODyB
TLSH
T108369E15E29440A4D02E5334C7569245B263AC210BE186CBEEF0F63DDB3E6F0AAFD657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_7dc0d35cf00589af76b8dbf43d953bd4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar

2026-08-05_7dc0d35cf00589af76b8dbf43d953bd4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_remcos_smoke-loader_vidar

.exe 4.7MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 f4ea26be784f153666bdd807507ae2d0331f7705e8de724eb89a8912a240f4e2
MD5 7dc0d35cf00589af76b8dbf43d953bd4
SHA1 c64b1d975bb6468f053ed42479ed06326e6c9774
SHA512 c1cf2e69aefd58d57f5de0aebaea82e21ba994c896b22ed5778d1bb81576ae270fd2acea09f59d79929b2f42abbb8c0f2fe9676d688209453c6a9f9a19b52e96
SSDEEP 49152:P/aZCzv/aZCziTWnMOHYw+Qj/aZCzv/aZCziTWnMOHYw+QyB:P2w2ZTmMODj2w2ZTmMODyB
TLSH
T108369E15E29440A4D02E5334C7569245B263AC210BE186CBEEF0F63DDB3E6F0AAFD657
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths