2026-07-20_9a49abe0b18d18a72fcf420e987a54bf_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-07-20_9a49abe0b18d18a72fcf420e987a54bf_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.2MB
Sample260720-njgbvags9l
SHA256 9b7b5dc248bcbd99d9931f2f7ea9ea16d614e090264c6dceab7df29fd3d262c9
MD5 9a49abe0b18d18a72fcf420e987a54bf
SHA1 14750133f5ea9ef0ae6b67e71bebcc9121b36eb1
SHA512 55bad6593a49ee9cf94cb4d0a88aec8e8da8b48ad2c28b5dae459a29b327e9fe6092e3b3a4cb978b1c7359d7d35380383eb3fddc68904ca9007232d8113a49da
SSDEEP 24576:3e6u/pjD3RScFM2iDZHQ6MkawT6Ri3v4MKOe4FI1P86N6EMPq0h7FAXi:3OBjzYRjRFGEv4MBzFI+n3hBsi
TLSH
T167B52220B7828073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_9a49abe0b18d18a72fcf420e987a54bf_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-07-20_9a49abe0b18d18a72fcf420e987a54bf_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.2MB

SHA256 9b7b5dc248bcbd99d9931f2f7ea9ea16d614e090264c6dceab7df29fd3d262c9
MD5 9a49abe0b18d18a72fcf420e987a54bf
SHA1 14750133f5ea9ef0ae6b67e71bebcc9121b36eb1
SHA512 55bad6593a49ee9cf94cb4d0a88aec8e8da8b48ad2c28b5dae459a29b327e9fe6092e3b3a4cb978b1c7359d7d35380383eb3fddc68904ca9007232d8113a49da
SSDEEP 24576:3e6u/pjD3RScFM2iDZHQ6MkawT6Ri3v4MKOe4FI1P86N6EMPq0h7FAXi:3OBjzYRjRFGEv4MBzFI+n3hBsi
TLSH
T167B52220B7828073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths