2026-08-19_c8b8c61fe8bc11f5d2a21e7894cb05ec_cloudeye_cobalt-strike_elex_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar

General

Target
2026-08-19_c8b8c61fe8bc11f5d2a21e7894cb05ec_cloudeye_cobalt-strike_elex_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar
Size 1.4MB
Sample260819-e1bm9ach95
SHA256 f4d242b9616019e5d7fd6a329dbe4f05dbc96740444e4e4ad0f7bbad763349e3
MD5 c8b8c61fe8bc11f5d2a21e7894cb05ec
SHA1 3b4dfe3f982fa9805b32dbd4073be46237a6fa2f
SHA512 3e94d93f29741a7dbd70d59086fffe3a38ffd1b796aacd845ade6ccd14058578b69c157cee7fd1a902281399a7e4063f01735af20484179b10cc22c5ea49b156
SSDEEP 12288:buV6ElnNMU3vTyUjD5xszt9euP+b0SoRUJDJhL95+B7a2SoEWKtsm455:buVpEOvTjsznhmbLoY0BW1oE1tT455
TLSH
T1CE656A02A780E862E86E493078F9C71B2B35FCD56F51C7B7232AF28C5E717519D2931A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_c8b8c61fe8bc11f5d2a21e7894cb05ec_cloudeye_cobalt-strike_elex_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar

2026-08-19_c8b8c61fe8bc11f5d2a21e7894cb05ec_cloudeye_cobalt-strike_elex_hijackloader_icedid_nymaim_rhadamanthys_stealc_vidar

.exe 1.4MB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 f4d242b9616019e5d7fd6a329dbe4f05dbc96740444e4e4ad0f7bbad763349e3
MD5 c8b8c61fe8bc11f5d2a21e7894cb05ec
SHA1 3b4dfe3f982fa9805b32dbd4073be46237a6fa2f
SHA512 3e94d93f29741a7dbd70d59086fffe3a38ffd1b796aacd845ade6ccd14058578b69c157cee7fd1a902281399a7e4063f01735af20484179b10cc22c5ea49b156
SSDEEP 12288:buV6ElnNMU3vTyUjD5xszt9euP+b0SoRUJDJhL95+B7a2SoEWKtsm455:buVpEOvTjsznhmbLoY0BW1oE1tT455
TLSH
T1CE656A02A780E862E86E493078F9C71B2B35FCD56F51C7B7232AF28C5E717519D2931A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths