2026-06-02_ef9106f3866c0e4980b222c313b3e07a_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-06-02_ef9106f3866c0e4980b222c313b3e07a_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.4MB
Sample260602-dc448acs8w
SHA256 b322b199cadc5248a5032acd44e7fe95fe560b2b522d497154396088616806a8
MD5 ef9106f3866c0e4980b222c313b3e07a
SHA1 726a52e0831d4fdcf21cfcaf72b63db15553030c
SHA512 774913ad592a2a8bf6092971dc68d4c00bb7bd40f342163a162683a041cda91c6ed333a24872ae5322f26d8257bf112bc173d438b8b8faddae4895675a9ea826
SSDEEP 24576:3e6u/pjD3RS+uYB1UtHyXqkFRzxca5s4ZM5eO9L1cRWm+ywKZehkVoPe:3OBjzYz0X71ds4ZQB9LGrMhcMe
TLSH
T1C9C512206F818072C52715B44EA0B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-02_ef9106f3866c0e4980b222c313b3e07a_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-06-02_ef9106f3866c0e4980b222c313b3e07a_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.4MB

SHA256 b322b199cadc5248a5032acd44e7fe95fe560b2b522d497154396088616806a8
MD5 ef9106f3866c0e4980b222c313b3e07a
SHA1 726a52e0831d4fdcf21cfcaf72b63db15553030c
SHA512 774913ad592a2a8bf6092971dc68d4c00bb7bd40f342163a162683a041cda91c6ed333a24872ae5322f26d8257bf112bc173d438b8b8faddae4895675a9ea826
SSDEEP 24576:3e6u/pjD3RS+uYB1UtHyXqkFRzxca5s4ZM5eO9L1cRWm+ywKZehkVoPe:3OBjzYz0X71ds4ZQB9LGrMhcMe
TLSH
T1C9C512206F818072C52715B44EA0B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths