2026-08-28_b4fde7312e302aaedfcb164b0e1f3c00_cloudeye_cobalt-strike_elex_hijackloader_shodi_wannacry

General

Target
2026-08-28_b4fde7312e302aaedfcb164b0e1f3c00_cloudeye_cobalt-strike_elex_hijackloader_shodi_wannacry
Size 836KB
Sample260828-lyeqfsce29
SHA256 86cab641042d7bb67363aea21f6dffb9277d1f7b599ff20906595dbec41b40fc
MD5 b4fde7312e302aaedfcb164b0e1f3c00
SHA1 e95ba7b7193ef1976121c3097cc3efca10831df7
SHA512 a7ef7fb7bfd9cf941dc337f4da3884c0d54dd858198d588b0a272dd1cccb9244baa5f730d73b2d675545374179e1de473d30a752466d6f5cde0cbbc627124d2a
SSDEEP 24576:+T1ZTjQZcwKCgt7TRHIDzDG3dZ9eLasmnH534:sT+KCUEzDGNZfnH5I
TLSH
T11C055A13F78550EAD44DC2788B96C222EA70BC851B22A6DF234037593F76BE06B3D759
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-28_b4fde7312e302aaedfcb164b0e1f3c00_cloudeye_cobalt-strike_elex_hijackloader_shodi_wannacry

2026-08-28_b4fde7312e302aaedfcb164b0e1f3c00_cloudeye_cobalt-strike_elex_hijackloader_shodi_wannacry

.exe 836KB

IMPHASH a0db151d55761167d93eba72d3d94b32
SHA256 86cab641042d7bb67363aea21f6dffb9277d1f7b599ff20906595dbec41b40fc
MD5 b4fde7312e302aaedfcb164b0e1f3c00
SHA1 e95ba7b7193ef1976121c3097cc3efca10831df7
SHA512 a7ef7fb7bfd9cf941dc337f4da3884c0d54dd858198d588b0a272dd1cccb9244baa5f730d73b2d675545374179e1de473d30a752466d6f5cde0cbbc627124d2a
SSDEEP 24576:+T1ZTjQZcwKCgt7TRHIDzDG3dZ9eLasmnH534:sT+KCUEzDGNZfnH5I
TLSH
T11C055A13F78550EAD44DC2788B96C222EA70BC851B22A6DF234037593F76BE06B3D759
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

10742

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths