2026-08-20_f09b7f1b7131863ac6561f22b9985a45_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-08-20_f09b7f1b7131863ac6561f22b9985a45_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 3.0MB
Sample260820-23cdwszzet
SHA256 8f28d7777cf7e33e89d7275d3df611ad9d5b827400319f324ec44ccb65b0ee16
MD5 f09b7f1b7131863ac6561f22b9985a45
SHA1 a1b2dedf4e1ba087ca9325352aa91bd8ad7f70e8
SHA512 b347be416080d5663c261353557f843c2e4985120016a6e523df58944f15a827c9f10b3517fc4a224348cb9e7c04b79eb3a4d72030e44197b0b2160a357a55d8
SSDEEP 49152:VhNhTVEJqFWk+4k+0rcKPzvoS7dRe2fP5GAFya0MUk156ru56rapYq:DVEDWUzwsG2fP5GAAauk2rbra6
TLSH
T149E57D11B299DEB9C06B807484B65666E677BC111F2087CB6390BF293E336D1BE35723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_f09b7f1b7131863ac6561f22b9985a45_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-08-20_f09b7f1b7131863ac6561f22b9985a45_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 3.0MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 8f28d7777cf7e33e89d7275d3df611ad9d5b827400319f324ec44ccb65b0ee16
MD5 f09b7f1b7131863ac6561f22b9985a45
SHA1 a1b2dedf4e1ba087ca9325352aa91bd8ad7f70e8
SHA512 b347be416080d5663c261353557f843c2e4985120016a6e523df58944f15a827c9f10b3517fc4a224348cb9e7c04b79eb3a4d72030e44197b0b2160a357a55d8
SSDEEP 49152:VhNhTVEJqFWk+4k+0rcKPzvoS7dRe2fP5GAFya0MUk156ru56rapYq:DVEDWUzwsG2fP5GAAauk2rbra6
TLSH
T149E57D11B299DEB9C06B807484B65666E677BC111F2087CB6390BF293E336D1BE35723
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths