2026-07-18_9d6a5d5faf46336cadd3ff0dcab66c8b_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

General

Target
2026-07-18_9d6a5d5faf46336cadd3ff0dcab66c8b_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 1.8MB
Sample260718-hp9yfsey5y
SHA256 af4ee31c11fb21de523834177800bb427d0961a12cafc8f7aa3358475e0906c2
MD5 9d6a5d5faf46336cadd3ff0dcab66c8b
SHA1 7cec47c5065e4076c176c5be8ff8cc5140f8e913
SHA512 e1be0d15b27dc5bce5c93019a94eefcf9bb278938e8f9260327d04456dadce352b27cbc46054f69faa196ebfbca4acea1ecf392caa3da5ccdad784bc9ca779c3
SSDEEP 24576:3e6u/pjD3RSclM2idZHf6ZkIw566iBUIMPOeBFI1/GQB6EoKg:3OBjzYfC2nMjUIM2uFIwYg
TLSH
T1B9951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_9d6a5d5faf46336cadd3ff0dcab66c8b_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

2026-07-18_9d6a5d5faf46336cadd3ff0dcab66c8b_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

.exe 1.8MB

SHA256 af4ee31c11fb21de523834177800bb427d0961a12cafc8f7aa3358475e0906c2
MD5 9d6a5d5faf46336cadd3ff0dcab66c8b
SHA1 7cec47c5065e4076c176c5be8ff8cc5140f8e913
SHA512 e1be0d15b27dc5bce5c93019a94eefcf9bb278938e8f9260327d04456dadce352b27cbc46054f69faa196ebfbca4acea1ecf392caa3da5ccdad784bc9ca779c3
SSDEEP 24576:3e6u/pjD3RSclM2idZHf6ZkIw566iBUIMPOeBFI1/GQB6EoKg:3OBjzYfC2nMjUIM2uFIwYg
TLSH
T1B9951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths