2026-10-15_0cb1574d724bc00fb136d6fc4849060b_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

General

Target
2026-10-15_0cb1574d724bc00fb136d6fc4849060b_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
Size 267KB
Sample261016-3enyfsey71
SHA256 9c4dc04e8d2667b4837871332ad5ae5cf928f20294aadf6287b5ba7d7a8d4c0a
MD5 0cb1574d724bc00fb136d6fc4849060b
SHA1 6be85dd3e0ecdec1aacfa2a453cc942248cd812f
SHA512 be4eb8070273036d687c2f69e0f54aa21bc51f9adbaa3037ef5e4b9e463b455012d017fb22b44e1616ba05caa44e5370089a3b75ce9cc01a08191be432b9f754
SSDEEP 6144:wlj7cMnw+wGQOF1vf5pS8Vb6IJ6noeL3X8L:wlbw+wXO7vxpS8xPKX8L
TLSH
T14F446B41B3E505E4F5B76A348D704616AA777C614B34DB4F03A482AA9F73B80DE39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-15_0cb1574d724bc00fb136d6fc4849060b_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

2026-10-15_0cb1574d724bc00fb136d6fc4849060b_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

.exe 267KB

SHA256 9c4dc04e8d2667b4837871332ad5ae5cf928f20294aadf6287b5ba7d7a8d4c0a
MD5 0cb1574d724bc00fb136d6fc4849060b
SHA1 6be85dd3e0ecdec1aacfa2a453cc942248cd812f
SHA512 be4eb8070273036d687c2f69e0f54aa21bc51f9adbaa3037ef5e4b9e463b455012d017fb22b44e1616ba05caa44e5370089a3b75ce9cc01a08191be432b9f754
SSDEEP 6144:wlj7cMnw+wGQOF1vf5pS8Vb6IJ6noeL3X8L:wlbw+wXO7vxpS8xPKX8L
TLSH
T14F446B41B3E505E4F5B76A348D704616AA777C614B34DB4F03A482AA9F73B80DE39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

104992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths