2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
Size 5.1MB
Sample261009-rf14maxyat
SHA256 637b5634a0f3817547acdaaf385b0d0a6636abc767e403c38cfecb050e91625e
MD5 59bcc3be6294e40172842f45f0444c24
SHA1 21f0c187045408189a488ddf3982895b83cdff66
SHA512 f38112796b099e3bcd3b47e28458eb4a89c8802c574c74b2d7157be3289c119d1c647211f94dafc4b871c758c26a8815a70deb04446b16088433bda94812e167
SSDEEP 49152:kdJDp5AVBXdct+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyYpYqaeW4Sp:kTzodN0oAaldmdmnpY6/fkZcB
TLSH
T1F9366B03F56446E6D062C078CE929665EB713C4907F1A6EF2284B7E92E33AD17F39721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry

File Explorer

2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry

.exe 5.1MB

2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry

SHA256 637b5634a0f3817547acdaaf385b0d0a6636abc767e403c38cfecb050e91625e
MD5 59bcc3be6294e40172842f45f0444c24
SHA1 21f0c187045408189a488ddf3982895b83cdff66
SHA512 f38112796b099e3bcd3b47e28458eb4a89c8802c574c74b2d7157be3289c119d1c647211f94dafc4b871c758c26a8815a70deb04446b16088433bda94812e167
SSDEEP 49152:kdJDp5AVBXdct+Cq99LyHHI+t6O8N+ailEy6dmpzeioK2enVzG1nkyYpYqaeW4Sp:kTzodN0oAaldmdmnpY6/fkZcB
TLSH
T1F9366B03F56446E6D062C078CE929665EB713C4907F1A6EF2284B7E92E33AD17F39721
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_59bcc3be6294e40172842f45f0444c24_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry

generic