2026-08-13_316018543e27289221eee3703182a56c_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-13_316018543e27289221eee3703182a56c_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.3MB
Sample260813-l47neswtaz
SHA256 87379ddedbd54e635c90e40c1cf14b55b855fd3fdcdbfd0b8c8462c1cc31830c
MD5 316018543e27289221eee3703182a56c
SHA1 abc463d9f33b3035792148bf5b56f115f6d84f77
SHA512 9ae63e9e565e404cc91a7fb85dc67fae81fcdcdfd8a2978ada41e29eb80ab2e17a46fc9a6bd055f7d9870d35cd2f7f6318adcc3ef201458610099eb6a6f7858a
SSDEEP 24576:3e6u/pjD3RSeXYBePtHyX72vR8WcZH/4ZM5eS9L15RWmYyUKCehkMoae:3OBjzY206ZB4/4ZQd9LxNBhdle
TLSH
T1E8B512206F818072C52715B44EA1B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-13_316018543e27289221eee3703182a56c_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-13_316018543e27289221eee3703182a56c_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.3MB

SHA256 87379ddedbd54e635c90e40c1cf14b55b855fd3fdcdbfd0b8c8462c1cc31830c
MD5 316018543e27289221eee3703182a56c
SHA1 abc463d9f33b3035792148bf5b56f115f6d84f77
SHA512 9ae63e9e565e404cc91a7fb85dc67fae81fcdcdfd8a2978ada41e29eb80ab2e17a46fc9a6bd055f7d9870d35cd2f7f6318adcc3ef201458610099eb6a6f7858a
SSDEEP 24576:3e6u/pjD3RSeXYBePtHyX72vR8WcZH/4ZM5eS9L15RWmYyUKCehkMoae:3OBjzY206ZB4/4ZQd9LxNBhdle
TLSH
T1E8B512206F818072C52715B44EA1B7685A29BE9237E74DFF16C732B8CB34EC29E76315
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths