2026-09-10_ac1401bd1a5605cd82657ed663493600_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

General

Target
2026-09-10_ac1401bd1a5605cd82657ed663493600_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar
Size 4.0MB
Sample260910-pepcbssgkb
SHA256 e6ae94df5ebe3cd1ab3759b9a3b8087a077a6c12b94e90452cc30be743aa452d
MD5 ac1401bd1a5605cd82657ed663493600
SHA1 8011ee06e0916b877f160eeec1c5b5b3fc2ca33f
SHA512 657cd34d44816e4e3d3ad5b17989947014ac5e4e5a386ed5ff5ad1dc89980839c84f61d988ae4bfca06cf521d39b486db0f4c5b1124ae7473925d00846a1df02
SSDEEP 49152:P/ahew2Eh/ahew2EpCbRquA/m2yL5zbfFiV+XenmE3/zfy6i1zuajsauZnJ3:P5g5/oq2VjnmOtn
TLSH
T1A1165B19F6A841E4D1AEC278C7A28652F273782547B196DF12D0C63D1F33AD05EBA723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-10_ac1401bd1a5605cd82657ed663493600_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

2026-09-10_ac1401bd1a5605cd82657ed663493600_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_vidar

.exe 4.0MB

IMPHASH ed86c2ba483c37b0e2cfeecbd5fca876
SHA256 e6ae94df5ebe3cd1ab3759b9a3b8087a077a6c12b94e90452cc30be743aa452d
MD5 ac1401bd1a5605cd82657ed663493600
SHA1 8011ee06e0916b877f160eeec1c5b5b3fc2ca33f
SHA512 657cd34d44816e4e3d3ad5b17989947014ac5e4e5a386ed5ff5ad1dc89980839c84f61d988ae4bfca06cf521d39b486db0f4c5b1124ae7473925d00846a1df02
SSDEEP 49152:P/ahew2Eh/ahew2EpCbRquA/m2yL5zbfFiV+XenmE3/zfy6i1zuajsauZnJ3:P5g5/oq2VjnmOtn
TLSH
T1A1165B19F6A841E4D1AEC278C7A28652F273782547B196DF12D0C63D1F33AD05EBA723
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

5080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths