2026-08-10_80f93bf52401a273fa93e7fa2e0dcd02_cobalt-strike_conti_elex_hijackloader_vidar

General

Target
2026-08-10_80f93bf52401a273fa93e7fa2e0dcd02_cobalt-strike_conti_elex_hijackloader_vidar
Size 838KB
Sample260810-e7n7xsbj9t
SHA256 68f6edd75998ac5ad6ecfda658e64f85798a46a7ee6eb6778ab4d827eb62990f
MD5 80f93bf52401a273fa93e7fa2e0dcd02
SHA1 71ce67cbff540004a65d8253df849a6dc8e14aa5
SHA512 c76348679bcb4c7280c8c9150b88ea2cd55afa6349716fabf22459c5e9b369b2e63f82f1bb09cb46d6452197f1ba7816695fbfd87ba46f522802df4077d34823
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSqqXsf3z:KIifqFu1//IifqFuyDA54GX79lSqxD
TLSH
T123054B06E29204ACC55F8170C7A65371BA73BC2156E0A7AF13D4F63D2F31B906EEA617
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_80f93bf52401a273fa93e7fa2e0dcd02_cobalt-strike_conti_elex_hijackloader_vidar

2026-08-10_80f93bf52401a273fa93e7fa2e0dcd02_cobalt-strike_conti_elex_hijackloader_vidar

.exe 838KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 68f6edd75998ac5ad6ecfda658e64f85798a46a7ee6eb6778ab4d827eb62990f
MD5 80f93bf52401a273fa93e7fa2e0dcd02
SHA1 71ce67cbff540004a65d8253df849a6dc8e14aa5
SHA512 c76348679bcb4c7280c8c9150b88ea2cd55afa6349716fabf22459c5e9b369b2e63f82f1bb09cb46d6452197f1ba7816695fbfd87ba46f522802df4077d34823
SSDEEP 12288:cP5V5KV5izrqFkbGE/F5V5KV5izrqFkbQX6IjUl54G2nC79lSqqXsf3z:KIifqFu1//IifqFuyDA54GX79lSqxD
TLSH
T123054B06E29204ACC55F8170C7A65371BA73BC2156E0A7AF13D4F63D2F31B906EEA617
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths