2026-08-09_71f2eaa3293884390d2d40c44317a58a_cloudeye_cobalt-strike_elex_hijackloader_icedid_shodi_vidar_wannacry

General

Target
2026-08-09_71f2eaa3293884390d2d40c44317a58a_cloudeye_cobalt-strike_elex_hijackloader_icedid_shodi_vidar_wannacry
Size 813KB
Sample260809-hhtynaar9z
SHA256 3f81a83fd643ef6b5b1ec67d4019e5f353e2d16bb032147dbc85e9486b6ac1d0
MD5 71f2eaa3293884390d2d40c44317a58a
SHA1 e9dfe8588cf80944f0e416c0f93a8659724ed555
SHA512 79fcd01018a0ffb665385572028b12ff55f5a7cdc7b8da5600671e832da9178e1b1420003d123b2cb1912eacd90bcf62eda50df7613abea7a1d96b32f6e7744b
SSDEEP 12288:+T1XTyUjD5xszt9euP+b0SoRUJDJyR1B1:+T1XTjsznhmbLopt
TLSH
T14F051802B780F962D56E4A30A8F9C7292B31FCD63F52874B2315B39C5E723519E2925F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_71f2eaa3293884390d2d40c44317a58a_cloudeye_cobalt-strike_elex_hijackloader_icedid_shodi_vidar_wannacry

2026-08-09_71f2eaa3293884390d2d40c44317a58a_cloudeye_cobalt-strike_elex_hijackloader_icedid_shodi_vidar_wannacry

.exe 813KB

IMPHASH a0db151d55761167d93eba72d3d94b32
SHA256 3f81a83fd643ef6b5b1ec67d4019e5f353e2d16bb032147dbc85e9486b6ac1d0
MD5 71f2eaa3293884390d2d40c44317a58a
SHA1 e9dfe8588cf80944f0e416c0f93a8659724ed555
SHA512 79fcd01018a0ffb665385572028b12ff55f5a7cdc7b8da5600671e832da9178e1b1420003d123b2cb1912eacd90bcf62eda50df7613abea7a1d96b32f6e7744b
SSDEEP 12288:+T1XTyUjD5xszt9euP+b0SoRUJDJyR1B1:+T1XTjsznhmbLopt
TLSH
T14F051802B780F962D56E4A30A8F9C7292B31FCD63F52874B2315B39C5E723519E2925F
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

10742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths