2026-09-04_97814cd41755885fc7c22cd3cc3b6ec9_amadey_cobalt-strike_elex_hellokitty_luca-stealer_nymaim_rhadamanthys_smoke-loader

General

Target
2026-09-04_97814cd41755885fc7c22cd3cc3b6ec9_amadey_cobalt-strike_elex_hellokitty_luca-stealer_nymaim_rhadamanthys_smoke-loader
Size 433KB
Sample260905-dalvvsstgt
SHA256 9fdaa2b770b7bca77e33317c945efa817664d6a3b7f8e21fe0f2f31c7d66527d
MD5 97814cd41755885fc7c22cd3cc3b6ec9
SHA1 f708d5da90f86c522833aa9734ab9d9fa2d8cfec
SHA512 6bda25435f39ef440a51c03f063c3039481a693cb06f3255caf906298714b98e5566026003c893c6e79bf77f7446ee9aad89692c68fc1d54d71ceb3ddcf256ce
SSDEEP 12288:oG8LjBTqKT60jr2Ybtre5MAgZQK9ZBnRNhcvp:oGw8Ku29ZZhqp
TLSH
T1DD94AF06B9C1C479F0768479187A9BB56A3FF9220B4087C72B54D6795F316C08E3EBB2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_97814cd41755885fc7c22cd3cc3b6ec9_amadey_cobalt-strike_elex_hellokitty_luca-stealer_nymaim_rhadamanthys_smoke-loader

2026-09-04_97814cd41755885fc7c22cd3cc3b6ec9_amadey_cobalt-strike_elex_hellokitty_luca-stealer_nymaim_rhadamanthys_smoke-loader

.exe 433KB

IMPHASH 8613ef930607533a0d5c58f82e848384
SHA256 9fdaa2b770b7bca77e33317c945efa817664d6a3b7f8e21fe0f2f31c7d66527d
MD5 97814cd41755885fc7c22cd3cc3b6ec9
SHA1 f708d5da90f86c522833aa9734ab9d9fa2d8cfec
SHA512 6bda25435f39ef440a51c03f063c3039481a693cb06f3255caf906298714b98e5566026003c893c6e79bf77f7446ee9aad89692c68fc1d54d71ceb3ddcf256ce
SSDEEP 12288:oG8LjBTqKT60jr2Ybtre5MAgZQK9ZBnRNhcvp:oGw8Ku29ZZhqp
TLSH
T1DD94AF06B9C1C479F0768479187A9BB56A3FF9220B4087C72B54D6795F316C08E3EBB2
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

15655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths