2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

General

Target
2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
Size 244KB
Sample260905-19ft8aap9w
SHA256 54a4d31da268f11106cc87827bbcadf0e01bf00f7f75f1d00a443ecd83f8366b
MD5 a61b5e0731c4ee5c3e86a02a475b93b7
SHA1 74aac8815294ad453e0e3b9161b912d2ba1555e2
SHA512 e3a9961a004c6eac3028648a5436bbfa6592875c48ff9814cee14a40462a6cd28f368888ca5eb3efc0cb64f2bf8dc1424e23c8e904e356e7b20ef0b4cddea92e
SSDEEP 6144:jFpkqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:5ppml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T139349E11B5E180B3E9B3093409F5AE759ABEF9310B258A7F63D84F6D0F30681D226767
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

2026-09-03_a61b5e0731c4ee5c3e86a02a475b93b7_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

.exe 244KB

SHA256 54a4d31da268f11106cc87827bbcadf0e01bf00f7f75f1d00a443ecd83f8366b
MD5 a61b5e0731c4ee5c3e86a02a475b93b7
SHA1 74aac8815294ad453e0e3b9161b912d2ba1555e2
SHA512 e3a9961a004c6eac3028648a5436bbfa6592875c48ff9814cee14a40462a6cd28f368888ca5eb3efc0cb64f2bf8dc1424e23c8e904e356e7b20ef0b4cddea92e
SSDEEP 6144:jFpkqml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:5ppml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T139349E11B5E180B3E9B3093409F5AE759ABEF9310B258A7F63D84F6D0F30681D226767
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

186365

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths