2026-07-28_8951d725819edfd6e8c9cb2392a0f3ec_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

General

Target
2026-07-28_8951d725819edfd6e8c9cb2392a0f3ec_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
Size 1.8MB
Sample260728-vm34ca1bmc
SHA256 472f76eb85a6cc6347f5d7a34385568da4fd49b68ae3c6fdf2f9dbaec73a52d1
MD5 8951d725819edfd6e8c9cb2392a0f3ec
SHA1 d827ea1e2e0de2b635b82ad6bea385246a6a8034
SHA512 f672f73a4527eafd507210b5c3fb6586e8065cb918493faa207f961169b894c299998b335e616d1250b42aff561d1309c85fde00dfc2b8d72f015870b6c94754
SSDEEP 24576:3e6u/pjD3RSsli2ieZHf6ZkI1m66iBUIMPOeBFI1/GQB6EMKg:3OBjzYYC2y/jUIM2uFIwEg
TLSH
T13B951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_8951d725819edfd6e8c9cb2392a0f3ec_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

2026-07-28_8951d725819edfd6e8c9cb2392a0f3ec_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee

.exe 1.8MB

SHA256 472f76eb85a6cc6347f5d7a34385568da4fd49b68ae3c6fdf2f9dbaec73a52d1
MD5 8951d725819edfd6e8c9cb2392a0f3ec
SHA1 d827ea1e2e0de2b635b82ad6bea385246a6a8034
SHA512 f672f73a4527eafd507210b5c3fb6586e8065cb918493faa207f961169b894c299998b335e616d1250b42aff561d1309c85fde00dfc2b8d72f015870b6c94754
SSDEEP 24576:3e6u/pjD3RSsli2ieZHf6ZkI1m66iBUIMPOeBFI1/GQB6EMKg:3OBjzYYC2y/jUIM2uFIwEg
TLSH
T13B951220B7C18073C22725744AE5F7B85B69BD622BF299DF1BC416B90F642C1937B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths