2026-08-14_f6019410063f4cb3909af5e3da0073a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar

General

Target
2026-08-14_f6019410063f4cb3909af5e3da0073a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar
Size 1.0MB
Sample260814-2nmlbatane
SHA256 b04c91a5934010b7c6915a4a3289df6a94120d037c1f7b39481b13c57022df5f
MD5 f6019410063f4cb3909af5e3da0073a0
SHA1 619e49db48afb1bf20658b0bb42e0943b785fa05
SHA512 990679c4bbf71f77c413e06ca728cea482d29dba5be4a2798f3b17b6391dc7d8744bd272701145394e9a48eec95c9b61e6783e092f414fd866df520ebd3b8075
SSDEEP 12288:+AwSfxL/2Dc3jDLLmt0LDQewsAjRu1gL5pRTcAkS/3hzN8qE43fm78VoD3JeU7v4:jaewsAjF5jcAkSYqyEoD5TvinrmC
TLSH
T15F352921F664CF35D07F84B5C692965AEA333C414F304BCB5394AE683E276D29A36723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

aspackv2

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_f6019410063f4cb3909af5e3da0073a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar

2026-08-14_f6019410063f4cb3909af5e3da0073a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar

.exe 1.0MB

SHA256 b04c91a5934010b7c6915a4a3289df6a94120d037c1f7b39481b13c57022df5f
MD5 f6019410063f4cb3909af5e3da0073a0
SHA1 619e49db48afb1bf20658b0bb42e0943b785fa05
SHA512 990679c4bbf71f77c413e06ca728cea482d29dba5be4a2798f3b17b6391dc7d8744bd272701145394e9a48eec95c9b61e6783e092f414fd866df520ebd3b8075
SSDEEP 12288:+AwSfxL/2Dc3jDLLmt0LDQewsAjRu1gL5pRTcAkS/3hzN8qE43fm78VoD3JeU7v4:jaewsAjF5jcAkSYqyEoD5TvinrmC
TLSH
T15F352921F664CF35D07F84B5C692965AEA333C414F304BCB5394AE683E276D29A36723
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables packed with ASPack
ASPack v2.12-2.42

Detects executables packed with ASPack v2.12-2.42

aspackv2
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

36865

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths