2026-06-01_1e030e0f0408672af96ddf8f04f4b70f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-06-01_1e030e0f0408672af96ddf8f04f4b70f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.4MB
Sample260601-pfymdsbs5t
SHA256 c18633a60e6a4a113530bb6794a225fd5094dd9fa1d818243043571ba7ec427c
MD5 1e030e0f0408672af96ddf8f04f4b70f
SHA1 746b987a1cc3dd798b04281164bdd85a01c1a1d7
SHA512 13b806ae1fbc04ec5a45f275a0e07b043e9479b72b4b09096ccfb5569340611743dd9ba893a5fd09312a3a22bf4a21d9fa51696498654a75a00ebbf7c6617636
SSDEEP 24576:3e6u/pjD3RS+uYB1UtHyXqkmRzxca5s4ZM5eO9L1cRWm+ywKZehk/oPe:3OBjzYz0X01ds4ZQB9LGrMhaMe
TLSH
T173C512206F818072C52715B44EA0B7685A25BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-01_1e030e0f0408672af96ddf8f04f4b70f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-06-01_1e030e0f0408672af96ddf8f04f4b70f_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.4MB

SHA256 c18633a60e6a4a113530bb6794a225fd5094dd9fa1d818243043571ba7ec427c
MD5 1e030e0f0408672af96ddf8f04f4b70f
SHA1 746b987a1cc3dd798b04281164bdd85a01c1a1d7
SHA512 13b806ae1fbc04ec5a45f275a0e07b043e9479b72b4b09096ccfb5569340611743dd9ba893a5fd09312a3a22bf4a21d9fa51696498654a75a00ebbf7c6617636
SSDEEP 24576:3e6u/pjD3RS+uYB1UtHyXqkmRzxca5s4ZM5eO9L1cRWm+ywKZehk/oPe:3OBjzYz0X01ds4ZQB9LGrMhaMe
TLSH
T173C512206F818072C52715B44EA0B7685A25BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths