2026-08-10_5d62c2d4c44061a84bc2526f722b5621_amadey_cobalt-strike_conti_elex_hijackloader

General

Target
2026-08-10_5d62c2d4c44061a84bc2526f722b5621_amadey_cobalt-strike_conti_elex_hijackloader
Size 973KB
Sample260810-srtdlaxtev
SHA256 86fafa9a0a1c3389175062f002dd7785f339b6bb41ef97de021cd27cc0ce82d3
MD5 5d62c2d4c44061a84bc2526f722b5621
SHA1 adccaeef6132a4ba44569925dcae0fce04be109e
SHA512 5df03f160785994b1870de83e7708f173968641bc6bccf71434e1d355b0ff8178e43db7d6cce73fec0d0b669ad04b7b87b7f2a9ae27998e5430d95499b623ef4
SSDEEP 12288:cPE/F5V5KV5izrqFkbQX6IjUl54G2nC79Q1gL5pRTcAkS/3hzN8qE43fm78VAx6:J//IifqFuyDA54GX79l5jcAkSYqyEAx6
TLSH
T1DC255A16F6608679D073C0B5C5D2A7B6EE31384547309BDF1389D7282F23BE69A3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_5d62c2d4c44061a84bc2526f722b5621_amadey_cobalt-strike_conti_elex_hijackloader

2026-08-10_5d62c2d4c44061a84bc2526f722b5621_amadey_cobalt-strike_conti_elex_hijackloader

.exe 973KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 86fafa9a0a1c3389175062f002dd7785f339b6bb41ef97de021cd27cc0ce82d3
MD5 5d62c2d4c44061a84bc2526f722b5621
SHA1 adccaeef6132a4ba44569925dcae0fce04be109e
SHA512 5df03f160785994b1870de83e7708f173968641bc6bccf71434e1d355b0ff8178e43db7d6cce73fec0d0b669ad04b7b87b7f2a9ae27998e5430d95499b623ef4
SSDEEP 12288:cPE/F5V5KV5izrqFkbQX6IjUl54G2nC79Q1gL5pRTcAkS/3hzN8qE43fm78VAx6:J//IifqFuyDA54GX79l5jcAkSYqyEAx6
TLSH
T1DC255A16F6608679D073C0B5C5D2A7B6EE31384547309BDF1389D7282F23BE69A3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths