2026-10-28_680f222a38ce49224160fd5dd21722ad_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

General

Target
2026-10-28_680f222a38ce49224160fd5dd21722ad_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar
Size 267KB
Sample261030-dee8wagy2x
SHA256 b45e6bd3b1883691e50cc0f67f3fee6041e17a2c846d9cfd5faaf07ae07cbde6
MD5 680f222a38ce49224160fd5dd21722ad
SHA1 43bac07c25ba7878458caa194a5a4b89daf731aa
SHA512 c8455f490b7c37f1023d3d338d424c7cbcc5ef9c788a3ce2e8eb855ab04da9944c4dac3d866a7dd1ccf0bc3514971c002282b031fd3a5319d84497a17b10ab12
SSDEEP 6144:wlj7cMnd+wGQOF1vf5pS8Vb6IJ6noeL3X8d:wlbd+wXO7vxpS8xPKX8d
TLSH
T1CB446B4173E505E4F5B76A348D704616AA777C614B34DB4F03A482AA9F73B80DE39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_680f222a38ce49224160fd5dd21722ad_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

2026-10-28_680f222a38ce49224160fd5dd21722ad_cobalt-strike_elex_icedid_luca-stealer_njrat_vidar

.exe 267KB

SHA256 b45e6bd3b1883691e50cc0f67f3fee6041e17a2c846d9cfd5faaf07ae07cbde6
MD5 680f222a38ce49224160fd5dd21722ad
SHA1 43bac07c25ba7878458caa194a5a4b89daf731aa
SHA512 c8455f490b7c37f1023d3d338d424c7cbcc5ef9c788a3ce2e8eb855ab04da9944c4dac3d866a7dd1ccf0bc3514971c002282b031fd3a5319d84497a17b10ab12
SSDEEP 6144:wlj7cMnd+wGQOF1vf5pS8Vb6IJ6noeL3X8d:wlbd+wXO7vxpS8xPKX8d
TLSH
T1CB446B4173E505E4F5B76A348D704616AA777C614B34DB4F03A482AA9F73B80DE39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

104992

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths