2026-08-06_80cb10005022095425254efc9c498d4b_amadey_cobalt-strike_darkgate_elex_nymaim_rhadamanthys_smoke-loader_vidar

General

Target
2026-08-06_80cb10005022095425254efc9c498d4b_amadey_cobalt-strike_darkgate_elex_nymaim_rhadamanthys_smoke-loader_vidar
Size 1.7MB
Sample260806-vmjppsbb62
SHA256 9fa99e4a7af43b5aa7bb58bcaebd8308685fa52701cc4e63c724a8b665744e86
MD5 80cb10005022095425254efc9c498d4b
SHA1 83f1c958c0b978eba2e9a9f2e5dfda85c81b5a24
SHA512 c878cb09aa53e7837e842e8d1c2a80a235ced3014b6b4d247d41142344b98c6d0d7f9f4856c9463a2afceca7675b46ec0e49a03310d31449cb3c9d84959785e4
SSDEEP 49152:t4K2tTToonbXaCbutmkO+wAOInO4XrztygxLHkJE4VB/:CK2/nbXaXs+wE9XD8VB/
TLSH
T1E385C023F79050B9D01BD230C7566632FA7AB8350B256ADF07909B652F77AE06B3D312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-06_80cb10005022095425254efc9c498d4b_amadey_cobalt-strike_darkgate_elex_nymaim_rhadamanthys_smoke-loader_vidar

2026-08-06_80cb10005022095425254efc9c498d4b_amadey_cobalt-strike_darkgate_elex_nymaim_rhadamanthys_smoke-loader_vidar

.exe 1.7MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 9fa99e4a7af43b5aa7bb58bcaebd8308685fa52701cc4e63c724a8b665744e86
MD5 80cb10005022095425254efc9c498d4b
SHA1 83f1c958c0b978eba2e9a9f2e5dfda85c81b5a24
SHA512 c878cb09aa53e7837e842e8d1c2a80a235ced3014b6b4d247d41142344b98c6d0d7f9f4856c9463a2afceca7675b46ec0e49a03310d31449cb3c9d84959785e4
SSDEEP 49152:t4K2tTToonbXaCbutmkO+wAOInO4XrztygxLHkJE4VB/:CK2/nbXaXs+wE9XD8VB/
TLSH
T1E385C023F79050B9D01BD230C7566632FA7AB8350B256ADF07909B652F77AE06B3D312
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths