2026-09-16_6e1cfa72d5f5a005b4087a09d35edad7_cobalt-strike_coinminer_elex_stealc_vidar_wannacry

General

Target
2026-09-16_6e1cfa72d5f5a005b4087a09d35edad7_cobalt-strike_coinminer_elex_stealc_vidar_wannacry
Size 472KB
Sample260916-nzesysty3l
SHA256 da9fd67c0abcd8019291b5b2a437bbd3eb767ede151bb22da99c116e05ab839e
MD5 6e1cfa72d5f5a005b4087a09d35edad7
SHA1 6c508ac3fc37f74ce4722de97b45c282eb187a13
SHA512 4dd53325ac1b9f28b7f5671d7924a673960c5b1b7b7241283af2b445ad7ae750d70ad8071cdc711a7570ace8b443a632b59a74ec3156dceff4c53af54f29bc18
SSDEEP 12288:q7+SMRyVaVVKdYYrkH1GNPdd8EI3wTIOfE+AKzHL:q7lVscdYYrkENb5fV
TLSH
T1ABA47D17F2A905FCE16BE17C46939901E7B6785E03619ACB13E092761F67BE05E3E320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_6e1cfa72d5f5a005b4087a09d35edad7_cobalt-strike_coinminer_elex_stealc_vidar_wannacry

2026-09-16_6e1cfa72d5f5a005b4087a09d35edad7_cobalt-strike_coinminer_elex_stealc_vidar_wannacry

.exe 472KB

SHA256 da9fd67c0abcd8019291b5b2a437bbd3eb767ede151bb22da99c116e05ab839e
MD5 6e1cfa72d5f5a005b4087a09d35edad7
SHA1 6c508ac3fc37f74ce4722de97b45c282eb187a13
SHA512 4dd53325ac1b9f28b7f5671d7924a673960c5b1b7b7241283af2b445ad7ae750d70ad8071cdc711a7570ace8b443a632b59a74ec3156dceff4c53af54f29bc18
SSDEEP 12288:q7+SMRyVaVVKdYYrkH1GNPdd8EI3wTIOfE+AKzHL:q7lVscdYYrkENb5fV
TLSH
T1ABA47D17F2A905FCE16BE17C46939901E7B6785E03619ACB13E092761F67BE05E3E320
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths