2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar

General

Target
2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar
Size 2.9MB
Sample261020-tztj1asthy
SHA256 c45a95201b3e14ad9b7daee1402af6f9e68d8a7964024a458774cee5aed4211a
MD5 73186bc9f42a97cb4ae01747fdf481e9
SHA1 26a3c90abf402445641104b7c40456b9166a7995
SHA512 3005f8b86dbb26f9ad9295e6ae89d9f96c68022790238cb40e475442a6674d9a26d94dcd3e27c9dcabcd43f4d11ba006e06d1e77e86d101a01b2fea16dbab692
SSDEEP 49152:/nTO68YlbvbaNFwYG93wgMqnstLet3Ly7H4eW4SkZP4sz9MbbYcL1n0UTF:H8YlbvbaNGYIeqnstLENfkZcbYcLpt
TLSH
T12AE53A12A2F54232E0B2F075D5A5675DA9763A219F30C6CFF344C22D2E2B6E1A935337
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar

.exe 2.9MB

2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar

SHA256 c45a95201b3e14ad9b7daee1402af6f9e68d8a7964024a458774cee5aed4211a
MD5 73186bc9f42a97cb4ae01747fdf481e9
SHA1 26a3c90abf402445641104b7c40456b9166a7995
SHA512 3005f8b86dbb26f9ad9295e6ae89d9f96c68022790238cb40e475442a6674d9a26d94dcd3e27c9dcabcd43f4d11ba006e06d1e77e86d101a01b2fea16dbab692
SSDEEP 49152:/nTO68YlbvbaNFwYG93wgMqnstLet3Ly7H4eW4SkZP4sz9MbbYcL1n0UTF:H8YlbvbaNGYIeqnstLENfkZcbYcLpt
TLSH
T12AE53A12A2F54232E0B2F075D5A5675DA9763A219F30C6CFF344C22D2E2B6E1A935337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

2

Major OS version

5

Entry point

117416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

700B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_73186bc9f42a97cb4ae01747fdf481e9_amadey_cloudeye_cobalt-strike_darkgate_fabookie_hijackloader_icedid_njrat_rhadamanthys_satacom_smoke-loader_stealc_tofsee_vidar

generic