2026-08-23_9046d8edf0f3c6d2659492f8ffff89a7_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

General

Target
2026-08-23_9046d8edf0f3c6d2659492f8ffff89a7_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader
Size 288KB
Sample260824-gd99eayvbx
SHA256 0c8001f319b844ce92da76963d6b7eea4129419357e3d4072371604dba27d8c5
MD5 9046d8edf0f3c6d2659492f8ffff89a7
SHA1 aa8483aa53e9ec00bb99df45bc4ac0a4bb599430
SHA512 ae211d94aca306c69183d8dc89503ad46dedc9ecebbcecafa2946499824046f24588a9cdebabd5ceda82327491dbd1e0e32354fefc0f8b520c4144c9f6b050d9
SSDEEP 6144:QSdZBWBke4/nGL/CPKj128LjN7TqK8tsp6g:XSN4fGjM8LjBTqKh
TLSH
T123549F17B9825079C56BC13043569E72BA7EBCA807207EEF17906A313F35ED06A3D35A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_9046d8edf0f3c6d2659492f8ffff89a7_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

2026-08-23_9046d8edf0f3c6d2659492f8ffff89a7_amadey_cobalt-strike_elex_hellokitty_nymaim_rhadamanthys_smoke-loader

.exe 288KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 0c8001f319b844ce92da76963d6b7eea4129419357e3d4072371604dba27d8c5
MD5 9046d8edf0f3c6d2659492f8ffff89a7
SHA1 aa8483aa53e9ec00bb99df45bc4ac0a4bb599430
SHA512 ae211d94aca306c69183d8dc89503ad46dedc9ecebbcecafa2946499824046f24588a9cdebabd5ceda82327491dbd1e0e32354fefc0f8b520c4144c9f6b050d9
SSDEEP 6144:QSdZBWBke4/nGL/CPKj128LjN7TqK8tsp6g:XSN4fGjM8LjBTqKh
TLSH
T123549F17B9825079C56BC13043569E72BA7EBCA807207EEF17906A313F35ED06A3D35A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths