2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader

General

Target
2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader
Size 724KB
Sample260818-wc5d4axcmd
SHA256 f3c46f29171cdc25b8a1e148a99e60bb8fbf369bc9a115acc78890d7bb010f57
MD5 64b31fb0d8d9013a2a3ee0dabdd18441
SHA1 8917c280c34ecea8fb11a6527235739fb171a376
SHA512 5b469bf123a32cdb367f3cc886475795795d553a204878f643fc0aefd49929bcce719306fbe1a48b3ecdbfa308ca59a158de314884036adb256d6b1e987c4f6e
SSDEEP 12288:ygUFgEsnojxgUFgEsnojk8LjBTqKCNAKiWGFyr0ccNo4AmZXuYh:y9+EM0x9+EM0kw8KjKjGFygcc24AhYh
TLSH
T1A3F48D0AFA8240B1D42609700A86E77E8724F924C8134F5BE7989FDFFFF2A919D14675
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader

File Explorer

2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader

.exe 724KB

2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader

SHA256 f3c46f29171cdc25b8a1e148a99e60bb8fbf369bc9a115acc78890d7bb010f57
MD5 64b31fb0d8d9013a2a3ee0dabdd18441
SHA1 8917c280c34ecea8fb11a6527235739fb171a376
SHA512 5b469bf123a32cdb367f3cc886475795795d553a204878f643fc0aefd49929bcce719306fbe1a48b3ecdbfa308ca59a158de314884036adb256d6b1e987c4f6e
SSDEEP 12288:ygUFgEsnojxgUFgEsnojk8LjBTqKCNAKiWGFyr0ccNo4AmZXuYh:y9+EM0x9+EM0kw8KjKjGFygcc24AhYh
TLSH
T1A3F48D0AFA8240B1D42609700A86E77E8724F924C8134F5BE7989FDFFFF2A919D14675
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

0

Entry point

6795

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_BOOT_APPLICATION

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

797KB

Virtual Size

796KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGER32C

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

PAGE

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

290KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_64b31fb0d8d9013a2a3ee0dabdd18441_amadey_cobalt-strike_elex_hellokitty_icedid_luca-stealer_njrat_smoke-loader

generic