2026-08-12_6c1e82860839729c8dd2b60261519ca3_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

General

Target
2026-08-12_6c1e82860839729c8dd2b60261519ca3_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry
Size 1.7MB
Sample260812-2ae93styew
SHA256 42bc787294176e1269fa97ffc7a3bfa862b4cf686db3814e2abc65fce8545550
MD5 6c1e82860839729c8dd2b60261519ca3
SHA1 da46c8398942ab9cd205a32a26910094eb12e127
SHA512 93faf5f2f87bfa02277248047ab80c4f24c14f54465baffa6876d5a27454a22575a936e84f2117d9c93028e2c9eddaed9bb2c611180f21a2922e1e2e82306348
SSDEEP 24576:+T1LgjI45bl9Mbonwap41+zzPTThwv3EJ8:ogjI45TMwwapIgTs
TLSH
T17F85B33271E2049AC68D9072DF46863597D23C7D8FF193F7B14572C92B729D07A3AA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_6c1e82860839729c8dd2b60261519ca3_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

2026-08-12_6c1e82860839729c8dd2b60261519ca3_cobalt-strike_elex_hijackloader_icedid_njrat_shodi_vidar_wannacry

.exe 1.7MB

IMPHASH a0db151d55761167d93eba72d3d94b32
SHA256 42bc787294176e1269fa97ffc7a3bfa862b4cf686db3814e2abc65fce8545550
MD5 6c1e82860839729c8dd2b60261519ca3
SHA1 da46c8398942ab9cd205a32a26910094eb12e127
SHA512 93faf5f2f87bfa02277248047ab80c4f24c14f54465baffa6876d5a27454a22575a936e84f2117d9c93028e2c9eddaed9bb2c611180f21a2922e1e2e82306348
SSDEEP 24576:+T1LgjI45bl9Mbonwap41+zzPTThwv3EJ8:ogjI45TMwwapIgTs
TLSH
T17F85B33271E2049AC68D9072DF46863597D23C7D8FF193F7B14572C92B729D07A3AA0A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

10742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths