2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play

General

Target
2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play
Size 83KB
Sample260930-fgxbaat19l
SHA256 ddc3a40d02788077e0c8f35b6006c13d063cf83b1c62ab829ac9f1dec4c37000
MD5 1ad27bc149094da716528a5cb20d27fb
SHA1 86e98f500d9d065af7637131fb29790cb5bc3cb5
SHA512 4795c42211e24e46bb8706954baf4a20b3de7550c9ace5ffbca37dc1e5a7e5fdc2ddb5958a533350fd2296cc91ad4f9edd2ac34f3fbbc904713329eb4093340f
SSDEEP 1536:iBZUj3nCsjvHhXmiT9Y2yWkjar0P1EMYSXzHvsWUJDocdFgJbvnPH:Lrn5jvHhX3yWkjar0P1XDKHFgJbvPH
TLSH
T157835A53B5C194B1E5720A324864EAA59A3FFC205F61DEAB3785263E0F301D18D36DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play

File Explorer

2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play

.exe 83KB

2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play

IMPHASH ed242d07b4f9696f1117364520433fc1
SHA256 ddc3a40d02788077e0c8f35b6006c13d063cf83b1c62ab829ac9f1dec4c37000
MD5 1ad27bc149094da716528a5cb20d27fb
SHA1 86e98f500d9d065af7637131fb29790cb5bc3cb5
SHA512 4795c42211e24e46bb8706954baf4a20b3de7550c9ace5ffbca37dc1e5a7e5fdc2ddb5958a533350fd2296cc91ad4f9edd2ac34f3fbbc904713329eb4093340f
SSDEEP 1536:iBZUj3nCsjvHhXmiT9Y2yWkjar0P1EMYSXzHvsWUJDocdFgJbvnPH:Lrn5jvHhX3yWkjar0P1XDKHFgJbvPH
TLSH
T157835A53B5C194B1E5720A324864EAA59A3FFC205F61DEAB3785263E0F301D18D36DBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7950

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SizeofResource LockResource LoadResource FindResourceW SetThreadErrorMode WriteConsoleW CloseHandle CreateFileW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind RaiseException GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetDriveTypeW GetFullPathNameW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc MultiByteToWideChar WideCharToMultiByte LCMapStringW GetCurrentDirectoryW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx DecodePointer

shell32

ShellExecuteW

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_1ad27bc149094da716528a5cb20d27fb_amadey_cobalt-strike_elex_play

kernel32

shell32

generic