2026-08-05_055d3db82b96c2961691d40d95edc7f2_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar

General

Target
2026-08-05_055d3db82b96c2961691d40d95edc7f2_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar
Size 4.4MB
Sample260805-x3htfsvbpg
SHA256 b016000473817b0359fffddcb115750092f6af49ef080d247cfc2b64a5da2443
MD5 055d3db82b96c2961691d40d95edc7f2
SHA1 2b6dd3a089d99a5b2eecfc11f8bba6e260990e4c
SHA512 8ea20c937a4ff7e71b364d5a996102ed9af5a79b11aada9e0df9b1eed7d2596a8affb78f3d5254eb08eea159bae7e6de793d5e15cdd5a7c39a1a71c6eb0235e5
SSDEEP 49152:P/aZCzN7z/aZCzN71HcLMidfWbbutmkO+wAOInO4XrztygxLHkJE4VBH:P2E2PLMKfWus+wE9XD8VBH
TLSH
T1D626E522E1941064DC1E1E70C7456230F2236C6F3E9D768ADEE4F63D9B3B6E169E8217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_055d3db82b96c2961691d40d95edc7f2_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar

2026-08-05_055d3db82b96c2961691d40d95edc7f2_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar

.exe 4.4MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 b016000473817b0359fffddcb115750092f6af49ef080d247cfc2b64a5da2443
MD5 055d3db82b96c2961691d40d95edc7f2
SHA1 2b6dd3a089d99a5b2eecfc11f8bba6e260990e4c
SHA512 8ea20c937a4ff7e71b364d5a996102ed9af5a79b11aada9e0df9b1eed7d2596a8affb78f3d5254eb08eea159bae7e6de793d5e15cdd5a7c39a1a71c6eb0235e5
SSDEEP 49152:P/aZCzN7z/aZCzN71HcLMidfWbbutmkO+wAOInO4XrztygxLHkJE4VBH:P2E2PLMKfWus+wE9XD8VBH
TLSH
T1D626E522E1941064DC1E1E70C7456230F2236C6F3E9D768ADEE4F63D9B3B6E169E8217
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths