2026-08-03_1ab87a6ea341ef65253c8e0636ac72e2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-03_1ab87a6ea341ef65253c8e0636ac72e2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.2MB
Sample260803-pfymdshc76
SHA256 f2bb79a023bada6dcef959c4bdb93176a1f68f0b71c2160544a081e1fbd97331
MD5 1ab87a6ea341ef65253c8e0636ac72e2
SHA1 e1f2da40b2077a15f5f77e43cf5ce1ed56d27964
SHA512 008a21b7154154b9040143083cfff6cf92932846b5e63925490488aa091d464cacbca30668789bdaa9d838124486dd7b2ed6594b064510eb608542f48497ef2a
SSDEEP 24576:3e6u/pjD3RS8lM2i4ZHf6oknw56EiBzIMKOeRFI1O8Qn6EMKt0h7jA2i:3OBjzYgCFwMFzIMBCFItuihP9i
TLSH
T121B52220B7C28073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_1ab87a6ea341ef65253c8e0636ac72e2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-03_1ab87a6ea341ef65253c8e0636ac72e2_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.2MB

SHA256 f2bb79a023bada6dcef959c4bdb93176a1f68f0b71c2160544a081e1fbd97331
MD5 1ab87a6ea341ef65253c8e0636ac72e2
SHA1 e1f2da40b2077a15f5f77e43cf5ce1ed56d27964
SHA512 008a21b7154154b9040143083cfff6cf92932846b5e63925490488aa091d464cacbca30668789bdaa9d838124486dd7b2ed6594b064510eb608542f48497ef2a
SSDEEP 24576:3e6u/pjD3RS8lM2i4ZHf6oknw56EiBzIMKOeRFI1O8Qn6EMKt0h7jA2i:3OBjzYgCFwMFzIMBCFItuihP9i
TLSH
T121B52220B7C28073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths