2026-08-11_061f59420770b1939aeb164fcaa50143_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

General

Target
2026-08-11_061f59420770b1939aeb164fcaa50143_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader
Size 710KB
Sample260811-ejrcdavhme
SHA256 7cb235fb53e26678867b7ca0fa1a287366f9d3cbe458952df86e30978a534ef8
MD5 061f59420770b1939aeb164fcaa50143
SHA1 9439013fe35c46da6a36f53382d0d78d3c79ac9d
SHA512 9d77becb033086393030abcdaa57f1581dc1d9ade2b4f881b47c8ff482a2a8ee3eae50859344b4ae62db7704dbe3b424366fe188c74da0ae5d11c29fe7e92b42
SSDEEP 12288:gN4fGjM8LjBTqKObM/lj1FFD282Ds8xFbeIjr7SPCx0hw1W3PM1:cMw8KH/B1FFD28ss87eIX7+1hw1W/C
TLSH
T159F4C003B9815076E807A132161EEF3DAA79B7154B325EDFC7C45C627F70AE1263A18A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_061f59420770b1939aeb164fcaa50143_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

2026-08-11_061f59420770b1939aeb164fcaa50143_amadey_cobalt-strike_elex_hellokitty_luca-stealer_njrat_nymaim_rhadamanthys_smoke-loader

.exe 710KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 7cb235fb53e26678867b7ca0fa1a287366f9d3cbe458952df86e30978a534ef8
MD5 061f59420770b1939aeb164fcaa50143
SHA1 9439013fe35c46da6a36f53382d0d78d3c79ac9d
SHA512 9d77becb033086393030abcdaa57f1581dc1d9ade2b4f881b47c8ff482a2a8ee3eae50859344b4ae62db7704dbe3b424366fe188c74da0ae5d11c29fe7e92b42
SSDEEP 12288:gN4fGjM8LjBTqKObM/lj1FFD282Ds8xFbeIjr7SPCx0hw1W3PM1:cMw8KH/B1FFD28ss87eIX7+1hw1W/C
TLSH
T159F4C003B9815076E807A132161EEF3DAA79B7154B325EDFC7C45C627F70AE1263A18A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths