2026-10-31_a3469912ef9c6021fe7e07a69d0509c4_amadey_cobalt-strike_elex_hellokitty_smoke-loader

General

Target
2026-10-31_a3469912ef9c6021fe7e07a69d0509c4_amadey_cobalt-strike_elex_hellokitty_smoke-loader
Size 156KB
Sample261101-1xp75afv2n
SHA256 ef912ed51cb38ba7100df2a290793df0a0eeedca5817d187a4d70e58bf94430e
MD5 a3469912ef9c6021fe7e07a69d0509c4
SHA1 cb14821b2558c0e75a2dfcbc39d4ffe48fc53e01
SHA512 b6c3ac8f05ccc10619c70db468b791806ac6205f582441e949d111d142ad4cb00f1b79652d9619888b9b3c4c7f56512f1ba218e4d0de89416c51c25e9098ecf0
SSDEEP 3072:sZ3QLv+tiVBG5UOQBIaMqZZmdarHQHzDKKOAg0FujDM:sSpINQKaMmQar7AO0
TLSH
T1AEF37D0574D2C472E573253249F4C6B45A3EFD720A629DBF27A80F7E4F30281D625ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-31_a3469912ef9c6021fe7e07a69d0509c4_amadey_cobalt-strike_elex_hellokitty_smoke-loader

2026-10-31_a3469912ef9c6021fe7e07a69d0509c4_amadey_cobalt-strike_elex_hellokitty_smoke-loader

.exe 156KB

SHA256 ef912ed51cb38ba7100df2a290793df0a0eeedca5817d187a4d70e58bf94430e
MD5 a3469912ef9c6021fe7e07a69d0509c4
SHA1 cb14821b2558c0e75a2dfcbc39d4ffe48fc53e01
SHA512 b6c3ac8f05ccc10619c70db468b791806ac6205f582441e949d111d142ad4cb00f1b79652d9619888b9b3c4c7f56512f1ba218e4d0de89416c51c25e9098ecf0
SSDEEP 3072:sZ3QLv+tiVBG5UOQBIaMqZZmdarHQHzDKKOAg0FujDM:sSpINQKaMmQar7AO0
TLSH
T1AEF37D0574D2C472E573253249F4C6B45A3EFD720A629DBF27A80F7E4F30281D625ABA
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

6

Entry point

19047

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths