2026-08-10_da82d795e5a0ea2ba255ac7e4d8e2fff_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

General

Target
2026-08-10_da82d795e5a0ea2ba255ac7e4d8e2fff_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar
Size 4.0MB
Sample260810-qhmhkshr21
SHA256 bfc00b2f71e4363d4cb3ad94546c7c998c88971f9bc637fec5ab2b682d649753
MD5 da82d795e5a0ea2ba255ac7e4d8e2fff
SHA1 e2764de5f27dd2f5e078e64d6fa98dd798598ba7
SHA512 7b5fc6190eff5e74e47f56d477e68854e59f629abbc534546de418bfef17a5eab84b688d997c7c2ebd1359fa47f9975a82c6c02e82cca8b04f19b915e6964509
SSDEEP 49152:y4K51L28eC/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKi:/K5d2fWQtZ/K0tGOFWVRuLftCTz
TLSH
T142166B13F58500E9D05ED179CF2A9631EB32785D0BF2B5EF26905AE12E27AE07B38750
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_da82d795e5a0ea2ba255ac7e4d8e2fff_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

2026-08-10_da82d795e5a0ea2ba255ac7e4d8e2fff_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader_vidar

.exe 4.0MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 bfc00b2f71e4363d4cb3ad94546c7c998c88971f9bc637fec5ab2b682d649753
MD5 da82d795e5a0ea2ba255ac7e4d8e2fff
SHA1 e2764de5f27dd2f5e078e64d6fa98dd798598ba7
SHA512 7b5fc6190eff5e74e47f56d477e68854e59f629abbc534546de418bfef17a5eab84b688d997c7c2ebd1359fa47f9975a82c6c02e82cca8b04f19b915e6964509
SSDEEP 49152:y4K51L28eC/KCGZd0qgNEf16lhulJLirHJIZ/K0tDAy49uO7G6XSq4vFWVRxYOKi:/K5d2fWQtZ/K0tGOFWVRuLftCTz
TLSH
T142166B13F58500E9D05ED179CF2A9631EB32785D0BF2B5EF26905AE12E27AE07B38750
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths