General

  • Target
    2026-10-31_d8a77c51b3a84bebabdbf8fc2de64020_amadey_cobalt-strike_darkgate_elex_gcleaner_hijackloader_luca-stealer_njrat_smoke-loader
  • Size 670KB
  • Sample261101-ydtp4aex4l
  • SHA256 2ed169e52ad1615b7b8a52d2b957e7fb7b2dc079d9752f71e5857fa1b8b5876e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2026-10-31_d8a77c51b3a84bebabdbf8fc2de64020_amadey_cobalt-strike_darkgate_elex_gcleaner_hijackloader_luca-stealer_njrat_smoke-loader
    .exe 670KB

2026-10-31_d8a77c51b3a84bebabdbf8fc2de64020_amadey_cobalt-strike_darkgate_elex_gcleaner_hijackloader_luca-stealer_njrat_smoke-loader

  • SHA256 2ed169e52ad1615b7b8a52d2b957e7fb7b2dc079d9752f71e5857fa1b8b5876e
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
86940
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths