2026-08-20_bd44fa4f5df724dfefe4fa675c81cff1_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar

General

Target
2026-08-20_bd44fa4f5df724dfefe4fa675c81cff1_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar
Size 2.9MB
Sample260820-vr15jsvwey
SHA256 f9496e7d125098fa2b0531c28b9d7ceb9fa2fd8bcd6235533d203b9ca636500b
MD5 bd44fa4f5df724dfefe4fa675c81cff1
SHA1 4a48ba49b1ef3ab87490872e92110a57212bdb95
SHA512 ea93913a67313c5583f9dab8cb8f2efa6a2be2b1b3beea2c7fb4a6e550498c7e72ef96199dc259a6a4077d7c27831e444613bf3fc6530f0f8d46f0155dfc951f
SSDEEP 49152:ggnThXqatgltKzq+9zX1opwBDx00ZImDP56rtTeu56rX:rdlErtTcrX
TLSH
T1B8E5F646A6544AB1D06B81748952865EE6727C11CF238FCB1290AEEEFFF36C05E35732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects executables packed with ASPack 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_ASPack

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_bd44fa4f5df724dfefe4fa675c81cff1_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar

2026-08-20_bd44fa4f5df724dfefe4fa675c81cff1_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_vidar

.exe 2.9MB

IMPHASH b941ddedcc51e5706d41335adb4e6b2a
SHA256 f9496e7d125098fa2b0531c28b9d7ceb9fa2fd8bcd6235533d203b9ca636500b
MD5 bd44fa4f5df724dfefe4fa675c81cff1
SHA1 4a48ba49b1ef3ab87490872e92110a57212bdb95
SHA512 ea93913a67313c5583f9dab8cb8f2efa6a2be2b1b3beea2c7fb4a6e550498c7e72ef96199dc259a6a4077d7c27831e444613bf3fc6530f0f8d46f0155dfc951f
SSDEEP 49152:ggnThXqatgltKzq+9zX1opwBDx00ZImDP56rtTeu56rX:rdlErtTcrX
TLSH
T1B8E5F646A6544AB1D06B81748952865EE6727C11CF238FCB1290AEEEFFF36C05E35732
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths