2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

General

Target
2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
Size 244KB
Sample260812-yr9cpsef23
SHA256 50cb46ce9596fc6c1930ecfed727cec6c87d4abd763268868b663ea338ec6287
MD5 c35990117e263e9526da638126799733
SHA1 582544f79f6d9a1ad98e84f06f5a4b794afc13f3
SHA512 3f47b044f3dd29ae6eef384aad6b058f4bc0fa61dc32d358c26a96cfce2bac9681a24bbca396ad04f5cc2b46d1975cc0b1ff2e4cb9e56d99c1d29694b89f0036
SSDEEP 6144:1VfjmN2qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:T7+Hml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T16334AE12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F23E85B6D1F30681D216773
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

2026-08-12_c35990117e263e9526da638126799733_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

.exe 244KB

SHA256 50cb46ce9596fc6c1930ecfed727cec6c87d4abd763268868b663ea338ec6287
MD5 c35990117e263e9526da638126799733
SHA1 582544f79f6d9a1ad98e84f06f5a4b794afc13f3
SHA512 3f47b044f3dd29ae6eef384aad6b058f4bc0fa61dc32d358c26a96cfce2bac9681a24bbca396ad04f5cc2b46d1975cc0b1ff2e4cb9e56d99c1d29694b89f0036
SSDEEP 6144:1VfjmN2qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:T7+Hml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T16334AE12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F23E85B6D1F30681D216773
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181588

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths