2026-08-16_70fe437e18d989b0602770529022657a_cobalt-strike_elex_rhadamanthys_stop_tofsee

General

Target
2026-08-16_70fe437e18d989b0602770529022657a_cobalt-strike_elex_rhadamanthys_stop_tofsee
Size 6.2MB
Sample260816-msg43awtaz
SHA256 a3b0788279ddc0e09c893ab7c02cef7452b671e88f6cdecb5c59a7e160d15274
MD5 70fe437e18d989b0602770529022657a
SHA1 342a2a782db28747422f6f813fda03b40a14cad0
SHA512 818592ad617f0fa759b88fce2f192e7ea79dac8b9eeaa2bcbef10480669c2c548991cac3845ee9f038b9cbbf31aa61e038aa23c915a3ebf1f6bbd155c47d5b95
SSDEEP 49152:yPKdPKkiEOEBitoPKjVHgOGf00ThdOyCPOAWmUBNT4+JnI8boQhfD6UDvxvykXk4:MkPpuHgO5zPOAWmUJDm
TLSH
T185665A13FF965062D8A95A3DD97C831A9772BC201B38C3DF5506BAE98EB12E0DDB0315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_70fe437e18d989b0602770529022657a_cobalt-strike_elex_rhadamanthys_stop_tofsee

2026-08-16_70fe437e18d989b0602770529022657a_cobalt-strike_elex_rhadamanthys_stop_tofsee

.exe 6.2MB

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a3b0788279ddc0e09c893ab7c02cef7452b671e88f6cdecb5c59a7e160d15274
MD5 70fe437e18d989b0602770529022657a
SHA1 342a2a782db28747422f6f813fda03b40a14cad0
SHA512 818592ad617f0fa759b88fce2f192e7ea79dac8b9eeaa2bcbef10480669c2c548991cac3845ee9f038b9cbbf31aa61e038aa23c915a3ebf1f6bbd155c47d5b95
SSDEEP 49152:yPKdPKkiEOEBitoPKjVHgOGf00ThdOyCPOAWmUBNT4+JnI8boQhfD6UDvxvykXk4:MkPpuHgO5zPOAWmUJDm
TLSH
T185665A13FF965062D8A95A3DD97C831A9772BC201B38C3DF5506BAE98EB12E0DDB0315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

53310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ServiceModelReg.pdb