2026-09-23_a43f8d9493cde3a6ebb3e1427c80310f_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar_wannacry

General

Target
2026-09-23_a43f8d9493cde3a6ebb3e1427c80310f_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar_wannacry
Size 1.6MB
Sample260923-yflghabc79
SHA256 f7a4e0d05bae638bff44a35eb3335f952dec98f2f5da0cd7ab347274e3b9d765
MD5 a43f8d9493cde3a6ebb3e1427c80310f
SHA1 98708ccc84c811f099abc84e01d9514cd4ea4115
SHA512 59a021fa227865d6d663ac20f7c84b278e838a1f874e1ebdfe9b9de224c5d7f8f2af391494c41945619544bc25bbe7f8d6c78917b0b1aad10f03a49a646465aa
SSDEEP 24576:a9JJd3n+Otv2K5iP7iS3dqmTjMD5TvinrmAYTqMi8CtBd2QHCHmTBW5:aOyCPOStqCe56r+qJtb2I
TLSH
T100751A50B2D24621EC6B9635DCEE565D96333C406F2C87EB120BDDF82E226B0D9F5722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-23_a43f8d9493cde3a6ebb3e1427c80310f_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar_wannacry

2026-09-23_a43f8d9493cde3a6ebb3e1427c80310f_amadey_cobalt-strike_elex_hijackloader_smoke-loader_vidar_wannacry

.sys 1.6MB

IMPHASH 083b2fda79bfff27730cc9cc50f8ecd5
SHA256 f7a4e0d05bae638bff44a35eb3335f952dec98f2f5da0cd7ab347274e3b9d765
MD5 a43f8d9493cde3a6ebb3e1427c80310f
SHA1 98708ccc84c811f099abc84e01d9514cd4ea4115
SHA512 59a021fa227865d6d663ac20f7c84b278e838a1f874e1ebdfe9b9de224c5d7f8f2af391494c41945619544bc25bbe7f8d6c78917b0b1aad10f03a49a646465aa
SSDEEP 24576:a9JJd3n+Otv2K5iP7iS3dqmTjMD5TvinrmAYTqMi8CtBd2QHCHmTBW5:aOyCPOStqCe56r+qJtb2I
TLSH
T100751A50B2D24621EC6B9635DCEE565D96333C406F2C87EB120BDDF82E226B0D9F5722
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

4515

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

csrss.pdb