2026-08-25_e1c7d7106eb1de2e90719ae6c589f527_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar

General

Target
2026-08-25_e1c7d7106eb1de2e90719ae6c589f527_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar
Size 1.8MB
Sample260826-f2s5cssdpf
SHA256 10aceb6e847e3bee5bcb161f4ec8b194833d72548c2b08956840e0b9b508a881
MD5 e1c7d7106eb1de2e90719ae6c589f527
SHA1 6ee1937338ff33b448252efe142113fbf4b659e5
SHA512 76e13c89108236c46aaed9bea0f80217e45c213c667086a4fbb38ad710adb5d44ead8c808dc767a44ea6deb7210049e1e5682baf0d06353c7baf2b7cb346f7fa
SSDEEP 24576:4/FL4/FL4/FL4/FL4/FLKLfUW3WpRwENzlNhc0mVpKdwqrid4Kplkbg:iFmFmFmFmFuLfUpRmV06JXpR
TLSH
T1E0954B17A7E844F4F2B746344AB68662E772BC215B31D7CF4264922D1F33AD09E35B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_e1c7d7106eb1de2e90719ae6c589f527_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar

2026-08-25_e1c7d7106eb1de2e90719ae6c589f527_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar

.exe 1.8MB

SHA256 10aceb6e847e3bee5bcb161f4ec8b194833d72548c2b08956840e0b9b508a881
MD5 e1c7d7106eb1de2e90719ae6c589f527
SHA1 6ee1937338ff33b448252efe142113fbf4b659e5
SHA512 76e13c89108236c46aaed9bea0f80217e45c213c667086a4fbb38ad710adb5d44ead8c808dc767a44ea6deb7210049e1e5682baf0d06353c7baf2b7cb346f7fa
SSDEEP 24576:4/FL4/FL4/FL4/FL4/FLKLfUW3WpRwENzlNhc0mVpKdwqrid4Kplkbg:iFmFmFmFmFuLfUpRmV06JXpR
TLSH
T1E0954B17A7E844F4F2B746344AB68662E772BC215B31D7CF4264922D1F33AD09E35B22
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

16589

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths