2026-08-03_3896d7cafbd58a15b9f54d98feb940cd_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-03_3896d7cafbd58a15b9f54d98feb940cd_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.4MB
Sample260804-pl2agawxe1
SHA256 8662a6c6d50b50c93ee1529f1d913a87872e3210e74e5a182aa39811ecee0ac4
MD5 3896d7cafbd58a15b9f54d98feb940cd
SHA1 dd0e9fe6093f702afb427ae7286670d2a69d8cc4
SHA512 d1f9778b8d9b3501bf97b05878726918f92a2b3d7458012780d8ff90a01acb18e01e930f4b160ca1755fea6d808826247054adddffa1cb65f46578b0248651ef
SSDEEP 24576:3e6u/pjD3RSeuYB1UtHyXJsTRzxcass4ZM5eO9L121Wm+ywKmehkVoSe:3OBjzYT0+11Ys4ZQB9L8rthc5e
TLSH
T1E4C512206F818072C52715B44EA0B7685A29BE9237E75DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_3896d7cafbd58a15b9f54d98feb940cd_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-03_3896d7cafbd58a15b9f54d98feb940cd_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.4MB

SHA256 8662a6c6d50b50c93ee1529f1d913a87872e3210e74e5a182aa39811ecee0ac4
MD5 3896d7cafbd58a15b9f54d98feb940cd
SHA1 dd0e9fe6093f702afb427ae7286670d2a69d8cc4
SHA512 d1f9778b8d9b3501bf97b05878726918f92a2b3d7458012780d8ff90a01acb18e01e930f4b160ca1755fea6d808826247054adddffa1cb65f46578b0248651ef
SSDEEP 24576:3e6u/pjD3RSeuYB1UtHyXJsTRzxcass4ZM5eO9L121Wm+ywKmehkVoSe:3OBjzYT0+11Ys4ZQB9L8rthc5e
TLSH
T1E4C512206F818072C52715B44EA0B7685A29BE9237E75DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths