2026-08-16_c3f3e83736000c97e64b68e9f03ab446_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar

General

Target
2026-08-16_c3f3e83736000c97e64b68e9f03ab446_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar
Size 991KB
Sample260816-vfdj4ssdnd
SHA256 ab90569f550a5a72a82e036b4808aa42b35b10b69dd38adc98080702de1f9cc5
MD5 c3f3e83736000c97e64b68e9f03ab446
SHA1 c1cd16e3e357cbd91f6df19625b19ac36dc4f0fa
SHA512 7d4cc0fc4374f8bcd04dd98a5b961f270007c8990887436a746c04fbe7c01cb6d718e294ca17dc5feb519a351704a45f9875167dff1254b0757b00fa72bbe290
SSDEEP 12288:cxcHNKxSpUVVo+XZNYVLeyUji0h90ZD0wxpGZIVuKrHs:dHNiqS0Le5ji0hmxNrM
TLSH
T15F255B16F77483B6D073C1B5C5E2968AEA3234510B308ACB5295C77D2E377E69A36332
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_c3f3e83736000c97e64b68e9f03ab446_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar

2026-08-16_c3f3e83736000c97e64b68e9f03ab446_amadey_cobalt-strike_elex_icedid_luca-stealer_njrat_rhadamanthys_stop_vidar

.exe 991KB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 ab90569f550a5a72a82e036b4808aa42b35b10b69dd38adc98080702de1f9cc5
MD5 c3f3e83736000c97e64b68e9f03ab446
SHA1 c1cd16e3e357cbd91f6df19625b19ac36dc4f0fa
SHA512 7d4cc0fc4374f8bcd04dd98a5b961f270007c8990887436a746c04fbe7c01cb6d718e294ca17dc5feb519a351704a45f9875167dff1254b0757b00fa72bbe290
SSDEEP 12288:cxcHNKxSpUVVo+XZNYVLeyUji0h90ZD0wxpGZIVuKrHs:dHNiqS0Le5ji0hmxNrM
TLSH
T15F255B16F77483B6D073C1B5C5E2968AEA3234510B308ACB5295C77D2E377E69A36332
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths