2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

General

Target
2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader
Size 244KB
Sample261024-w4jayabw5t
SHA256 86bd40b7a7f8d403ea64fcf51b5541d3b0bc54b7b7b6c6d924c545ea5326386f
MD5 28d93804200e305cf5a231fd894917f4
SHA1 288a0412a59409a9d41887311d262a32d346e56a
SHA512 15b0879570660df1dc77ccf679dc53df168df44f283f44f3004d867785ec1dbebbf0f20cb802f8b979834578c984e686a8f3eb788899b31e6e9fcbde8c37e4fd
SSDEEP 6144:WVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:47+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T1F2349E12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F63D84F6D1F30681921A773
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

2026-10-22_28d93804200e305cf5a231fd894917f4_amadey_cobalt-strike_elex_hijackloader_luca-stealer_njrat_smoke-loader

.exe 244KB

SHA256 86bd40b7a7f8d403ea64fcf51b5541d3b0bc54b7b7b6c6d924c545ea5326386f
MD5 28d93804200e305cf5a231fd894917f4
SHA1 288a0412a59409a9d41887311d262a32d346e56a
SHA512 15b0879570660df1dc77ccf679dc53df168df44f283f44f3004d867785ec1dbebbf0f20cb802f8b979834578c984e686a8f3eb788899b31e6e9fcbde8c37e4fd
SSDEEP 6144:WVfjmN9qml5a6EdkQxiUmRQColKGAOPQK2GwIgfx+qSfF0:47+Uml5a6EdkQgUmR7G9QK3wJx+qSfF0
TLSH
T1F2349E12B5E180B3E9B30D3449F4AE759ABDB9310B258A7F63D84F6D1F30681921A773
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

181586

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths