2026-08-05_e5441a18ca5d5f28b8b60bbb00611b08_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-05_e5441a18ca5d5f28b8b60bbb00611b08_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.2MB
Sample260805-lq8cssyydx
SHA256 bca948e2d0e7cdfae195547dd7742f0e6a3e3304474617412f0c5da5f443db49
MD5 e5441a18ca5d5f28b8b60bbb00611b08
SHA1 d404ef0e9d80ccac677855f7e131e1f8affbdc2f
SHA512 923927ffd462f9ca649d473eb3addd69153543e27053b4b60e0a3f489dad4243e33dffdd411468c062261c8c1839716ac2b1da1e7a837d2631acfa2e44461e82
SSDEEP 24576:3e6u/pjD3RS8lM2i4ZHf6oknw56Ei/hIMKOeRFI1O8Qn6EMKt0h7jA2i:3OBjzYgCFwMThIMBCFItuihP9i
TLSH
T1ADB52220B7C28073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_e5441a18ca5d5f28b8b60bbb00611b08_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-05_e5441a18ca5d5f28b8b60bbb00611b08_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.2MB

SHA256 bca948e2d0e7cdfae195547dd7742f0e6a3e3304474617412f0c5da5f443db49
MD5 e5441a18ca5d5f28b8b60bbb00611b08
SHA1 d404ef0e9d80ccac677855f7e131e1f8affbdc2f
SHA512 923927ffd462f9ca649d473eb3addd69153543e27053b4b60e0a3f489dad4243e33dffdd411468c062261c8c1839716ac2b1da1e7a837d2631acfa2e44461e82
SSDEEP 24576:3e6u/pjD3RS8lM2i4ZHf6oknw56Ei/hIMKOeRFI1O8Qn6EMKt0h7jA2i:3OBjzYgCFwMThIMBCFItuihP9i
TLSH
T1ADB52220B7C28073C12725B44AE5F7B85779BDA22BF299DF17C556B80F242C1927B31A
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths