2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar

General

Target
2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar
Size 3.7MB
Sample261002-1afeeavy9l
SHA256 1cdbed2d339acf29b2bede9e9e01c40dfe5b248da68983173da637c1148ce155
MD5 fea6fdfd325293e5cd9496d71d6d5840
SHA1 059f90f565f1672f62339514d134afe8aa888c88
SHA512 0d7463b99a8a2cf767557e252b736c5b48414213f9c399e6da1bc4a8660666b43f18e8184b2fde002fc0825c15d6362b3f999a55bcaf705c5fd9c519474e5aec
SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjGw+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYljM1yj80oAaldmdmnpp
TLSH
T1A2067B03B29544E9D1A6C170CE5AD6319731BC584BF1A6EF3280BAD93E73AD07B39712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar

2026-10-02_fea6fdfd325293e5cd9496d71d6d5840_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_njrat_smoke-loader_vidar

.exe 3.7MB

SHA256 1cdbed2d339acf29b2bede9e9e01c40dfe5b248da68983173da637c1148ce155
MD5 fea6fdfd325293e5cd9496d71d6d5840
SHA1 059f90f565f1672f62339514d134afe8aa888c88
SHA512 0d7463b99a8a2cf767557e252b736c5b48414213f9c399e6da1bc4a8660666b43f18e8184b2fde002fc0825c15d6362b3f999a55bcaf705c5fd9c519474e5aec
SSDEEP 49152:nj9LxcO4Q5YljGvNPFsjGw+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyp:njBxcO4EYljM1yj80oAaldmdmnpp
TLSH
T1A2067B03B29544E9D1A6C170CE5AD6319731BC584BF1A6EF3280BAD93E73AD07B39712
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

4640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_DEBUG_STRIPPED

PDB paths