2026-08-15_b63316b6bc08e685e3e02d690a7717e3_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

General

Target
2026-08-15_b63316b6bc08e685e3e02d690a7717e3_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar
Size 2.5MB
Sample260815-msmpjsvwhx
SHA256 88d8cce9d717857033a02ee716fabf42fc5fcbf50955cbebc4a76a78d0eac9cd
MD5 b63316b6bc08e685e3e02d690a7717e3
SHA1 2875a33194211934b931597311f2fd12ff3009a3
SHA512 b37c451ff8a8baab40552fd3063e322e838856628803d9e3084a24cd3877c90c290eb86431eb6885eb2f5144139340bad422d4dfe2e5edcc178c30aa96215cf3
SSDEEP 24576:Re6u/O8D3RSZ0YKkztHy3ju0Q8xEV5K4Zu5momK1BGRm5yfK7eok/LPe:ROm8zYfgKbmqK4ZSHmKCAKoaLe
TLSH
T12EC512206F818072C12615B44EA0B7685625BE9237E75DFF26C736B8CF34EC29E76319
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_b63316b6bc08e685e3e02d690a7717e3_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

2026-08-15_b63316b6bc08e685e3e02d690a7717e3_coinminer_cosmicduke_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee_vidar

.exe 2.5MB

SHA256 88d8cce9d717857033a02ee716fabf42fc5fcbf50955cbebc4a76a78d0eac9cd
MD5 b63316b6bc08e685e3e02d690a7717e3
SHA1 2875a33194211934b931597311f2fd12ff3009a3
SHA512 b37c451ff8a8baab40552fd3063e322e838856628803d9e3084a24cd3877c90c290eb86431eb6885eb2f5144139340bad422d4dfe2e5edcc178c30aa96215cf3
SSDEEP 24576:Re6u/O8D3RSZ0YKkztHy3ju0Q8xEV5K4Zu5momK1BGRm5yfK7eok/LPe:ROm8zYfgKbmqK4ZSHmKCAKoaLe
TLSH
T12EC512206F818072C12615B44EA0B7685625BE9237E75DFF26C736B8CF34EC29E76319
MD5 SHA1 SHA512 SSDEEP TLSH

UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

35307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths