2026-09-16_b83521dbabd04de77eb7da2f3ece12a5_cobalt-strike_elex_icedid_njrat_remcos_vidar

General

Target
2026-09-16_b83521dbabd04de77eb7da2f3ece12a5_cobalt-strike_elex_icedid_njrat_remcos_vidar
Size 379KB
Sample260916-wbc88adq9v
SHA256 6b3b5c5b5fc3b39571f664db75bcb7ae616387878b9e3ff234b671ef94226f73
MD5 b83521dbabd04de77eb7da2f3ece12a5
SHA1 6e486f02753b0c5cc86f74578ee5f4b6d7579554
SHA512 7cec93ca38a0887ffe7126895a6d0aa520102bacba8a1705638fc2fb938198dfeef3e5c82dc5d77296213963ea203880d04f073864c3da13f4de31d75209ec1b
SSDEEP 6144:ZVfjmNeXdnf1VDU2mMQTyydY3xl2D+qAM4mF5sAOj/dxCwfiU9eu:v7+etnf1W298gPzW4OSdxmkeu
TLSH
T1A584AD5673A81CE9E83781388D529616E7B27C610720C7DF1364A76EAF736E0AD3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_b83521dbabd04de77eb7da2f3ece12a5_cobalt-strike_elex_icedid_njrat_remcos_vidar

2026-09-16_b83521dbabd04de77eb7da2f3ece12a5_cobalt-strike_elex_icedid_njrat_remcos_vidar

.exe 379KB

SHA256 6b3b5c5b5fc3b39571f664db75bcb7ae616387878b9e3ff234b671ef94226f73
MD5 b83521dbabd04de77eb7da2f3ece12a5
SHA1 6e486f02753b0c5cc86f74578ee5f4b6d7579554
SHA512 7cec93ca38a0887ffe7126895a6d0aa520102bacba8a1705638fc2fb938198dfeef3e5c82dc5d77296213963ea203880d04f073864c3da13f4de31d75209ec1b
SSDEEP 6144:ZVfjmNeXdnf1VDU2mMQTyydY3xl2D+qAM4mF5sAOj/dxCwfiU9eu:v7+etnf1W298gPzW4OSdxmkeu
TLSH
T1A584AD5673A81CE9E83781388D529616E7B27C610720C7DF1364A76EAF736E0AD3DB10
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths