2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 5.4MB
Sample260908-v8m91sha49
SHA256 ef98dcba30003a43f4f36946c0a64c9b6cfe59206f170ec63357e14a13b3ddd4
MD5 41af3c7e9cff5b98cda7213375f068c7
SHA1 8035fa36eff563a407c5b82b2759eda0e8c9cc6e
SHA512 5446312837e5983e59f3265137a5dbc55c947a8e13e079da3ce4f49dcd4454f692bec731eada1b4d1adc0fd0c8445ed971c44431c81c5085210427a193f4b8e4
SSDEEP 98304:njBxcO4EY+vWQtZ/K0tGOFWVRuLftCT2g:njBxcO4OvWyZ/K0ttYVAAT2g
TLSH
T12B466C03F2E541A8E0AAD178CF369632DB72BC594BF1A5DF224076D51E72AD07B38721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-09-08_41af3c7e9cff5b98cda7213375f068c7_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 5.4MB

SHA256 ef98dcba30003a43f4f36946c0a64c9b6cfe59206f170ec63357e14a13b3ddd4
MD5 41af3c7e9cff5b98cda7213375f068c7
SHA1 8035fa36eff563a407c5b82b2759eda0e8c9cc6e
SHA512 5446312837e5983e59f3265137a5dbc55c947a8e13e079da3ce4f49dcd4454f692bec731eada1b4d1adc0fd0c8445ed971c44431c81c5085210427a193f4b8e4
SSDEEP 98304:njBxcO4EY+vWQtZ/K0tGOFWVRuLftCT2g:njBxcO4OvWyZ/K0ttYVAAT2g
TLSH
T12B466C03F2E541A8E0AAD178CF369632DB72BC594BF1A5DF224076D51E72AD07B38721
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths