2026-08-08_8bda709c5e0c24a960f0a80eed01b711_cobalt-strike_elex_virlock

General

Target
2026-08-08_8bda709c5e0c24a960f0a80eed01b711_cobalt-strike_elex_virlock
Size 202KB
Sample260808-2pfjdsff79
SHA256 6b7d9b2d7cdc544da3c2e97194572e6c106e15c7b397734ee47d75e511da7b50
MD5 8bda709c5e0c24a960f0a80eed01b711
SHA1 a3033af1e83c26e2540f7437729a515680c368b8
SHA512 277cb858e2cbb587204c578af0d193bc6ae2078e804de3e06fe5d2d1ada64166244080a12cd85306c4480064de3d76f1b655711c81006c87f2129ad40ca435f7
SSDEEP 3072:6X1pe/ZoMB5sVXhUpX+wREbOG7V+sXiYsCuQzygnA3lQh3QOy5SVTskUG:6X1pe/9+XUpxEbhhZ2Qh3QOhIkUG
TLSH
T1FF147E3AC41DC7EE8FD4B8F3A1D7A48562D4047226CBA5771E9CCF7BE46936B9080912
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_8bda709c5e0c24a960f0a80eed01b711_cobalt-strike_elex_virlock

2026-08-08_8bda709c5e0c24a960f0a80eed01b711_cobalt-strike_elex_virlock

.exe 202KB

SHA256 6b7d9b2d7cdc544da3c2e97194572e6c106e15c7b397734ee47d75e511da7b50
MD5 8bda709c5e0c24a960f0a80eed01b711
SHA1 a3033af1e83c26e2540f7437729a515680c368b8
SHA512 277cb858e2cbb587204c578af0d193bc6ae2078e804de3e06fe5d2d1ada64166244080a12cd85306c4480064de3d76f1b655711c81006c87f2129ad40ca435f7
SSDEEP 3072:6X1pe/ZoMB5sVXhUpX+wREbOG7V+sXiYsCuQzygnA3lQh3QOy5SVTskUG:6X1pe/9+XUpxEbhhZ2Qh3QOhIkUG
TLSH
T1FF147E3AC41DC7EE8FD4B8F3A1D7A48562D4047226CBA5771E9CCF7BE46936B9080912
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

188183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths