2026-07-18_9f5fbfbc5b9819614f26dc20a35bbfd0_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

General

Target
2026-07-18_9f5fbfbc5b9819614f26dc20a35bbfd0_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 1.8MB
Sample260718-hn4eaaey2z
SHA256 67ea7ae014db6944b5d7d6b5a2f6ea6a6db7ab4ccf8c8a69aef20da91d1b12a4
MD5 9f5fbfbc5b9819614f26dc20a35bbfd0
SHA1 a718700ff137f01b826c1e2f5e012341aca78642
SHA512 4857ab2fb1bb1eea4480f964824bf2f886d0ba69d0c4ec69e9462980b8cb77a5ba90576863bf8870f4b29ced3b9f9c80a7342ed15b184cc056db10516b611ac7
SSDEEP 24576:3e6u/pjD3RSclMsidZHf6ZkIw566iB7IMPOeBFI1/GQB6EMKg:3OBjzY1C2nMj7IM2uFIwEg
TLSH
T15D951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_9f5fbfbc5b9819614f26dc20a35bbfd0_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

2026-07-18_9f5fbfbc5b9819614f26dc20a35bbfd0_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

.exe 1.8MB

SHA256 67ea7ae014db6944b5d7d6b5a2f6ea6a6db7ab4ccf8c8a69aef20da91d1b12a4
MD5 9f5fbfbc5b9819614f26dc20a35bbfd0
SHA1 a718700ff137f01b826c1e2f5e012341aca78642
SHA512 4857ab2fb1bb1eea4480f964824bf2f886d0ba69d0c4ec69e9462980b8cb77a5ba90576863bf8870f4b29ced3b9f9c80a7342ed15b184cc056db10516b611ac7
SSDEEP 24576:3e6u/pjD3RSclMsidZHf6ZkIw566iB7IMPOeBFI1/GQB6EMKg:3OBjzY1C2nMj7IM2uFIwEg
TLSH
T15D951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths